subjects:
- kind: User
  name: "alice@example.com"
  apiGroup: rbac.authorization.k8s.io
