ate a role named "foo" with SubResource specified kubectl create role foo --verb=get,list,watch --resource=pods,pods/status