varReference:
- path: spec/mode
  kind: ClusterRbacConfig