permission	allowed
get pods	yes
patch pods	yes
get pods/exec	yes
create pods/exec	yes
get pods/log	yes
create networkpolicies.networking.k8s.io	yes