anchor.diff:  |Name|Description|Required|Schema|Default
   |apiVersion|version of the schema the object should have|false|string|
   |kind|kind of object, in CamelCase; cannot be updated|false|string|
  -|lastModified||true|string (date-time)|
  +|lastModified|last time any part of the object was created, updated, or deleted|true|string (date-time)|
   |metadata||false|<<v1.ObjectMeta>>|
  -|roles||true|<<v1.NamedClusterRole>> array|
  +|roles|all the roles held by this policy, mapped by role name|true|<<v1.NamedClusterRole>> array|
   |===
   
   === v1.EnvVarSource
  
positive.code: |apiVersion|version of the schema the object should have|false|string|
  |kind|kind of object, in CamelCase; cannot be updated|false|string|
  |metadata||false|<<v1.ObjectMeta>>|
  |redirectURIs||false|string array|
  |respondWithChallenges||false|boolean|false
  |secret||false|string|
  |===
  
  === v1.VolumeMount
  
negative.code: |===
  |Name|Description|Required|Schema|Default
  |apiVersion|version of the schema the object should have|false|string|
  |content|actual content of the request for a create or update|false|string|
  |kind|kind of object, in CamelCase; cannot be updated|false|string|
  |resource|one of the existing resource types|true|string|
  |resourceName|name of the resource being requested for a get or delete operation|false|string|
  |verb|one of get, list, watch, create, update, delete|true|string|
  |===
  
  === v1.GlusterfsVolumeSource
  