authorization

RBAC policy that will be applied and managed by GKE On-Prem. Structure is documented below.