["customresourcedefini"] verbs: ["get", "list", "watch"] - apiGroups: ["discovery.k8s.io"] resources: ["endpointslices"] verbs: ["get", "list", "watch"] - apiGroups: ["{{ $mcsAPIGroup }}"] resources: ["serviceexports"] verbs: ["get", "list", "watch", "create", "delete"] - apiGroups: ["{{ $mcsAPIGroup }}"] resources: ["serviceimports"] verbs: ["get", "list", "watch"] - apiGroups: ["apps"] resources: ["replicasets"] verbs: ["get", "list", "watch"] - apiGroups: ["authentication.k8s.io"] resources: ["tokenreviews"]...

                            {
                             "key": "iss"
                            }
                           ],
                           "value": {
                            "list_match": {
                             "one_of": {
                              "string_match": {
                               "exact": "https://accounts.google.com"
                              }