# kind: ClusterRole
# apiVersion: rbac.authorization.k8s.io/v1
# metadata:
#   name: user-readonly
# rules:
# - apiGroups:
#     - rbac.authorization.k8s.io
#   resources: 
#     - clusterroles
#   verbs: 
#     - list
#     - watch