[v17] Add a new role.allow.request field called kubernetes_resources

[v17] Add a new role.allow.request field called kubernetes_resources #27652