{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "has-in-cluster-local:rbac.authorization.k8s.io/Role:application-service/application-service-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"has-in-cluster-local:rbac.authorization.k8s.io/Role:application-service/application-service-leader-election-role\"},\"name\":\"application-service-leader-election-role\",\"namespace\":\"application-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:20Z", "name": "application-service-leader-election-role", "namespace": "application-service", "resourceVersion": "20784", "uid": "c45b5187-3655-4df3-9377-ed03f6b72e55" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "has-in-cluster-local:rbac.authorization.k8s.io/Role:application-service/has-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"has-in-cluster-local:rbac.authorization.k8s.io/Role:application-service/has-admin\"},\"name\":\"has-admin\",\"namespace\":\"application-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"delete\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments/scale\"],\"verbs\":[\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:20Z", "name": "has-admin", "namespace": "application-service", "resourceVersion": "20783", "uid": "9919f7b8-a24f-41c6-9579-75e678a31b11" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments/scale" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-admin\"},\"name\":\"build-admin\",\"namespace\":\"build-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:02Z", "name": "build-admin", "namespace": "build-service", "resourceVersion": "23665", "uid": "559b0e50-02a0-46d4-983a-779587beae5c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-service-build-pipeline-config-read-only", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-service-build-pipeline-config-read-only\"},\"name\":\"build-service-build-pipeline-config-read-only\",\"namespace\":\"build-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resourceNames\":[\"build-pipeline-config\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:02Z", "name": "build-service-build-pipeline-config-read-only", "namespace": "build-service", "resourceVersion": "23664", "uid": "59229965-1df5-4808-91b2-51ec87c5a87f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "build-pipeline-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-service-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"build-service-in-cluster-local:rbac.authorization.k8s.io/Role:build-service/build-service-leader-election-role\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"build-service\"},\"name\":\"build-service-leader-election-role\",\"namespace\":\"build-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:02Z", "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "build-service" }, "name": "build-service-leader-election-role", "namespace": "build-service", "resourceVersion": "23661", "uid": "480a1e4f-6614-4edf-bf06-3b9bb1436f87" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/admin-buildpipelineselectors", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/admin-buildpipelineselectors\"},\"name\":\"admin-buildpipelineselectors\",\"namespace\":\"build-templates-e2e\"},\"rules\":[{\"apiGroups\":[\"appstudio.redhat.com\"],\"resources\":[\"buildpipelineselectors\"],\"verbs\":[\"create\",\"delete\",\"get\",\"list\",\"patch\",\"update\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:41Z", "name": "admin-buildpipelineselectors", "namespace": "build-templates-e2e", "resourceVersion": "22650", "uid": "b8c7c55b-b443-4a59-aa81-90628ed91291" }, "rules": [ { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "buildpipelineselectors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/build-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/build-admin\"},\"name\":\"build-admin\",\"namespace\":\"build-templates-e2e\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:41Z", "name": "build-admin", "namespace": "build-templates-e2e", "resourceVersion": "22651", "uid": "539acbe0-7451-4b8d-87dc-9067517c33d2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/edit-namespace", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/edit-namespace\"},\"name\":\"edit-namespace\",\"namespace\":\"build-templates-e2e\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"namespaces\"],\"verbs\":[\"update\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:41Z", "name": "edit-namespace", "namespace": "build-templates-e2e", "resourceVersion": "22648", "uid": "55a9f18d-bca8-435b-bde8-e6a72f62d9fa" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/integration-runner-resources", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"build-templates-in-cluster-local:rbac.authorization.k8s.io/Role:build-templates-e2e/integration-runner-resources\"},\"name\":\"integration-runner-resources\",\"namespace\":\"build-templates-e2e\"},\"rules\":[{\"apiGroups\":[\"appstudio.redhat.com\"],\"resources\":[\"applications\",\"components\"],\"verbs\":[\"get\",\"list\",\"create\",\"watch\",\"update\",\"patch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:41Z", "name": "integration-runner-resources", "namespace": "build-templates-e2e", "resourceVersion": "22649", "uid": "ebcd4239-8f75-4bf4-a07c-b9acc1d926ff" }, "rules": [ { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications", "components" ], "verbs": [ "get", "list", "create", "watch", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:41Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "build-templates", "resourceVersion": "71337", "uid": "880407bd-7d61-4c19-8bef-b1ec28b96099" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "*" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backuprepositories.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backupstoragelocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "bundles.trust.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificaterequests.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificates.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "challenges.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "cloudstorages.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusterissuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datadownloads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "dataprotectionapplications.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datauploads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "deletebackuprequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "downloadrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "ec-defaults" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "issuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "istiocsrs.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "kueues.kueue.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "orders.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumebackups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumerestores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "restores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "schedules.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "serverstatusrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "syncerservices.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonmulticlusterproxyaaes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonschedulers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempomonolithics.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempostacks.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "volumesnapshotlocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "*" ] }, { "apiGroups": [ "bindings.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "eventing.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "flows.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "messaging.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sources.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:41Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "build-templates", "resourceVersion": "22129", "uid": "b098d019-7dc2-4af2-833b-640b1ecf7b79" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:10Z", "labels": { "olm.managed": "true", "olm.owner": "cert-manager-operator.v1.19.0", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "cert-manager-operator", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator": "" }, "name": "cert-manager-operator.v1-8avl0jYCNWpNVU2Mr9j8EIfRaMGFwRbvqpaG77", "namespace": "cert-manager-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "cert-manager-operator.v1.19.0", "uid": "08c337b6-d9b1-4954-8c29-26eb09818b71" } ], "resourceVersion": "37887", "uid": "fe9caa41-31bf-4082-9bc9-a38329f1ecb3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:07Z", "labels": { "olm.managed": "true" }, "name": "cert-manager-operator.v1.19.0", "namespace": "cert-manager-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "cert-manager-operator.v1.19.0", "uid": "e875cd7b-f014-4e7b-a39e-eeb2fb1e630b" } ], "resourceVersion": "37056", "uid": "62529480-4ebe-4a66-aaa1-2c83716b4193" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "cert-manager-operator.v1.19.0" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:26Z", "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager-tokenrequest", "namespace": "cert-manager", "resourceVersion": "37976", "uid": "1e296232-0365-4020-ba65-04335f568cf2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cert-manager" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:16Z", "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager-webhook:dynamic-serving", "namespace": "cert-manager", "resourceVersion": "37409", "uid": "6d774958-dd6d-4e07-8c57-90ddeb110c71" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cert-manager-webhook-ca" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "trust-manager-in-cluster-local:rbac.authorization.k8s.io/Role:cert-manager/trust-manager", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"trust-manager-in-cluster-local:rbac.authorization.k8s.io/Role:cert-manager/trust-manager\"},\"labels\":{\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.19.0\",\"helm.sh/chart\":\"trust-manager-v0.19.0\"},\"name\":\"trust-manager\",\"namespace\":\"cert-manager\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:40:26Z", "labels": { "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.19.0", "helm.sh/chart": "trust-manager-v0.19.0" }, "name": "trust-manager", "namespace": "cert-manager", "resourceVersion": "37974", "uid": "2dfca1fe-bd57-4e0a-871e-7e593bcde8b9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "trust-manager-in-cluster-local:rbac.authorization.k8s.io/Role:cert-manager/trust-manager:leaderelection", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"trust-manager-in-cluster-local:rbac.authorization.k8s.io/Role:cert-manager/trust-manager:leaderelection\"},\"labels\":{\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.19.0\",\"helm.sh/chart\":\"trust-manager-v0.19.0\"},\"name\":\"trust-manager:leaderelection\",\"namespace\":\"cert-manager\"},\"rules\":[{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"create\",\"update\",\"watch\",\"list\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:40:26Z", "labels": { "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.19.0", "helm.sh/chart": "trust-manager-v0.19.0" }, "name": "trust-manager:leaderelection", "namespace": "cert-manager", "resourceVersion": "37975", "uid": "cf2d8208-cd88-4adc-bd81-7d206cc00314" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "watch", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:34Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "12409", "uid": "e4c9f6dd-19fe-491f-9686-0300f430ff06" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-controller-in-cluster-local:rbac.authorization.k8s.io/Role:image-controller/image-controller-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-controller-in-cluster-local:rbac.authorization.k8s.io/Role:image-controller/image-controller-admin\"},\"name\":\"image-controller-admin\",\"namespace\":\"image-controller\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"jobs\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:42Z", "name": "image-controller-admin", "namespace": "image-controller", "resourceVersion": "22347", "uid": "3dd04dd2-19f1-45d6-b8cf-4020f39897cb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-controller-in-cluster-local:rbac.authorization.k8s.io/Role:image-controller/image-controller-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-controller-in-cluster-local:rbac.authorization.k8s.io/Role:image-controller/image-controller-leader-election-role\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"image-controller\"},\"name\":\"image-controller-leader-election-role\",\"namespace\":\"image-controller\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:42Z", "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "image-controller" }, "name": "image-controller-leader-election-role", "namespace": "image-controller", "resourceVersion": "22352", "uid": "2196055e-ae70-4fa1-ad94-4d36399fadbc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-rbac-proxy-in-cluster-local:rbac.authorization.k8s.io/Role:image-rbac-proxy/oauth-secret-generator", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-rbac-proxy-in-cluster-local:rbac.authorization.k8s.io/Role:image-rbac-proxy/oauth-secret-generator\"},\"name\":\"oauth-secret-generator\",\"namespace\":\"image-rbac-proxy\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"list\",\"create\",\"get\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"deployments\"],\"verbs\":[\"get\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:17Z", "name": "oauth-secret-generator", "namespace": "image-rbac-proxy", "resourceVersion": "20566", "uid": "7a8033ae-92a7-4ff4-89cc-35ff1989bb8b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "create", "get", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "integration-in-cluster-local:rbac.authorization.k8s.io/Role:integration-service/integration-service-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"integration-in-cluster-local:rbac.authorization.k8s.io/Role:integration-service/integration-service-leader-election-role\"},\"name\":\"integration-service-leader-election-role\",\"namespace\":\"integration-service\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:32Z", "name": "integration-service-leader-election-role", "namespace": "integration-service", "resourceVersion": "25944", "uid": "35a6fbb8-b49a-4900-97d2-af3f9fcc7aab" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/imc-dispatcher-tls-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/imc-dispatcher-tls-role\"},\"name\":\"imc-dispatcher-tls-role\",\"namespace\":\"knative-eventing\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:30Z", "name": "imc-dispatcher-tls-role", "namespace": "knative-eventing", "resourceVersion": "25815", "uid": "9c4b9f30-d75a-4596-8c20-91e0cff50292" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/knative-eventing-webhook", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/knative-eventing-webhook\"},\"labels\":{\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\"},\"name\":\"knative-eventing-webhook\",\"namespace\":\"knative-eventing\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"create\",\"update\",\"list\",\"watch\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:30Z", "labels": { "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7" }, "name": "knative-eventing-webhook", "namespace": "knative-eventing", "resourceVersion": "25816", "uid": "cdd873cf-90a6-4048-8668-52a1b1c5dddb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "create", "update", "list", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/knative-inmemorychannel-webhook", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/knative-inmemorychannel-webhook\"},\"labels\":{\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\"},\"name\":\"knative-inmemorychannel-webhook\",\"namespace\":\"knative-eventing\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"create\",\"update\",\"list\",\"watch\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:30Z", "labels": { "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7" }, "name": "knative-inmemorychannel-webhook", "namespace": "knative-eventing", "resourceVersion": "25812", "uid": "222cf8d8-3cdd-4d7c-8bfd-98209c062cf0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "create", "update", "list", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/mt-broker-filter", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/mt-broker-filter\"},\"name\":\"mt-broker-filter\",\"namespace\":\"knative-eventing\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:30Z", "name": "mt-broker-filter", "namespace": "knative-eventing", "resourceVersion": "25811", "uid": "612ef0f5-ade0-45d9-a2fd-853c9ed95f39" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/mt-broker-ingress", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:rbac.authorization.k8s.io/Role:knative-eventing/mt-broker-ingress\"},\"name\":\"mt-broker-ingress\",\"namespace\":\"knative-eventing\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"get\",\"list\",\"watch\"]},{\"apiGroups\":[\"\"],\"resourceNames\":[\"mt-broker-ingress-oidc\"],\"resources\":[\"serviceaccounts/token\"],\"verbs\":[\"create\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:30Z", "name": "mt-broker-ingress", "namespace": "knative-eventing", "resourceVersion": "25827", "uid": "0e5ca33f-312e-48e5-a64c-781af7ce4943" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "mt-broker-ingress-oidc" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "konflux-info-in-cluster-local:rbac.authorization.k8s.io/Role:konflux-info/konflux-public-info-view-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"konflux-info-in-cluster-local:rbac.authorization.k8s.io/Role:konflux-info/konflux-public-info-view-role\"},\"name\":\"konflux-public-info-view-role\",\"namespace\":\"konflux-info\"},\"rules\":[{\"apiGroups\":[\"\"],\"resourceNames\":[\"konflux-public-info\",\"konflux-banner-configmap\",\"cluster-config\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:34:26Z", "name": "konflux-public-info-view-role", "namespace": "konflux-info", "resourceVersion": "25828", "uid": "9e60847d-cba0-47c8-8255-e43af493cbf2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "konflux-public-info", "konflux-banner-configmap", "cluster-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:rbac.authorization.k8s.io/Role:konflux-kyverno/konflux-kyverno:admission-controller" }, "creationTimestamp": "2026-04-30T17:36:43Z", "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "konflux-kyverno:admission-controller", "namespace": "konflux-kyverno", "resourceVersion": "32039", "uid": "4ad7d894-174e-43d0-bc4f-569e324183da" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "get", "list", "watch", "patch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resourceNames": [ "konflux-kyverno", "konflux-kyverno-metrics" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:rbac.authorization.k8s.io/Role:konflux-kyverno/konflux-kyverno:background-controller" }, "creationTimestamp": "2026-04-30T17:36:43Z", "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "konflux-kyverno:background-controller", "namespace": "konflux-kyverno", "resourceVersion": "32035", "uid": "20a5de1a-aaef-4205-9bee-0b5ecbbc5c0a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "konflux-kyverno", "konflux-kyverno-metrics" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "kyverno-background-controller" ], "resources": [ "leases" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:rbac.authorization.k8s.io/Role:konflux-kyverno/konflux-kyverno:cleanup-controller" }, "creationTimestamp": "2026-04-30T17:36:43Z", "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "konflux-kyverno:cleanup-controller", "namespace": "konflux-kyverno", "resourceVersion": "32040", "uid": "a1494320-f275-4029-8f7a-235318e43f59" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kyverno-cleanup-controller.konflux-kyverno.svc.kyverno-tls-ca", "kyverno-cleanup-controller.konflux-kyverno.svc.kyverno-tls-pair" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "konflux-kyverno", "konflux-kyverno-metrics" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "kyverno-cleanup-controller" ], "resources": [ "leases" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "260", "uid": "0532737d-44c2-49b8-beed-97d41004c5d5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-info" ], "resources": [ "configmaps" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:19Z", "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager-cainjector:leaderelection", "namespace": "kube-system", "resourceVersion": "37649", "uid": "79f7e988-9cab-4766-9346-d59e03fab11d" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "cert-manager-cainjector-leader-election", "cert-manager-cainjector-leader-election-core" ], "resources": [ "leases" ], "verbs": [ "get", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:25Z", "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager:leaderelection", "namespace": "kube-system", "resourceVersion": "37949", "uid": "bb29c939-8ae9-427d-9fd5-a59bc0dfbb02" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "cert-manager-controller" ], "resources": [ "leases" ], "verbs": [ "get", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "259", "uid": "b596daee-7d1e-4d24-936e-42d43bba912f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "extension-apiserver-authentication" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:34Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "12435", "uid": "c4aa1cfb-47d8-4952-960f-15bb118a8939" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "264", "uid": "59a3fbe1-f0ee-4699-9e94-78b382cf6b17" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-controller-manager" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "265", "uid": "fc1dce13-edea-4c4f-a97c-9df97de3348d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-scheduler" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "261", "uid": "14f37f78-086a-4acc-bd29-79d2bf913d10" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "262", "uid": "866a8c1a-ad93-48cc-b6c8-497fcdfc546d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:05:58Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "263", "uid": "8c90f962-4021-485a-88e5-da8c5a65f21d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "watch" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:21Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:leader-election-lock-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "1534", "uid": "50270f48-9d48-4689-b361-ed340d2cbd31" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:rbac.authorization.k8s.io/Role:kueue-external-admission/alert-mgr-kueue-admission-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:rbac.authorization.k8s.io/Role:kueue-external-admission/alert-mgr-kueue-admission-leader-election-role\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"alert-manager-kueue-admission\"},\"name\":\"alert-mgr-kueue-admission-leader-election-role\",\"namespace\":\"kueue-external-admission\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:37:22Z", "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "alert-manager-kueue-admission" }, "name": "alert-mgr-kueue-admission-leader-election-role", "namespace": "kueue-external-admission", "resourceVersion": "33370", "uid": "7219d185-cd54-48d7-a3f2-85863774b5de" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "mintmaker-in-cluster-local:rbac.authorization.k8s.io/Role:mintmaker/mintmaker-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"mintmaker-in-cluster-local:rbac.authorization.k8s.io/Role:mintmaker/mintmaker-admin\"},\"name\":\"mintmaker-admin\",\"namespace\":\"mintmaker\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\",\"pods/attach\",\"pods/exec\",\"pods/log\",\"secrets\",\"configmaps\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"batch\"],\"resources\":[\"cronjobs\",\"jobs\"],\"verbs\":[\"*\"]},{\"apiGroups\":[\"appstudio.redhat.com\"],\"resources\":[\"dependencyupdatechecks\"],\"verbs\":[\"*\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:26Z", "name": "mintmaker-admin", "namespace": "mintmaker", "resourceVersion": "21113", "uid": "eb3174fd-a99d-4bd1-9232-af87a27294b8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/log", "secrets", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "*" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "dependencyupdatechecks" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "mintmaker-in-cluster-local:rbac.authorization.k8s.io/Role:mintmaker/mintmaker-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"mintmaker-in-cluster-local:rbac.authorization.k8s.io/Role:mintmaker/mintmaker-leader-election-role\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"mintmaker\"},\"name\":\"mintmaker-leader-election-role\",\"namespace\":\"mintmaker\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:26Z", "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "mintmaker" }, "name": "mintmaker-leader-election-role", "namespace": "mintmaker", "resourceVersion": "21111", "uid": "8f04b33b-5a04-456f-ae82-63e5c0a62035" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:36:17Z", "name": "oadp-minio-storage-role", "namespace": "openshift-adp", "resourceVersion": "30478", "uid": "a8a733bf-7c0c-4622-884f-f3d3fa4997df" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get" ] }, { "apiGroups": [ "minio.min.io" ], "resources": [ "tenants" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:53Z", "labels": { "olm.managed": "true" }, "name": "oadp-operator.v1.4.9", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "oadp-operator.v1.4.9", "uid": "3a9b32ac-dc58-4d97-8ff3-4c1ddeda5852" } ], "resourceVersion": "23171", "uid": "86cfe0dc-134a-4c89-aceb-6be075bf6c5c" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "oadp-operator.v1.4.9" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:55Z", "labels": { "olm.managed": "true", "olm.owner": "oadp-operator.v1.4.9", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-adp", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/redhat-oadp-operator.openshift-adp": "" }, "name": "oadp-operator.v1.4.9-ope-arogFylqwEdcfHAIBvyZHZTwLv8oJ7hzbNz77N", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "oadp-operator.v1.4.9", "uid": "8064bbe9-42f3-4086-bb35-5c682e1dfe48" } ], "resourceVersion": "24793", "uid": "2906424c-878f-4d0d-8615-5a7dec9de37d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:00Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "641", "uid": "b63d4f37-132c-4751-8c6f-afb3c2ad953c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:21Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1558", "uid": "5ea2493e-1939-426a-8943-2c1fccc4d128" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:02Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "750", "uid": "f406dbca-0375-4526-b8d6-39315697ec8c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:39Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "3150", "uid": "a900dd31-5eea-4aef-8649-e8e1834ceda2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:14Z", "name": "backplane-cee-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6117", "uid": "3de70e6c-c42a-4ecd-9a2c-217b25788fac" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:48Z", "name": "backplane-csm-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6611", "uid": "edc9366e-da4b-497d-b698-f6de3de2c5b2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:32Z", "name": "backplane-mcs-tier-two-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6477", "uid": "1ea31d37-f4b0-460b-b6e6-fc487cf85096" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:45Z", "name": "backplane-mobb-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6583", "uid": "6443cae4-ba8a-43ce-898f-598f4243b0d4" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:46Z", "name": "backplane-srep-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6594", "uid": "8183bcea-58a0-4402-a3b3-dc6bfdbd602b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:49Z", "name": "backplane-tam-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6618", "uid": "082b550e-c4e5-4d5a-9ad3-93f164d759a8" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:12Z", "name": "osd-delete-backplane-script-resources", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6003", "uid": "ed39a93e-5c1d-4b37-8769-3384e0cc1e71" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "serviceaccounts" ], "verbs": [ "get", "list", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:07:11Z", "name": "cloud-credential-operator-role", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1014", "uid": "400695fe-5e19-40e0-a27f-8f5a812fd402" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "events", "serviceaccounts", "services", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "*" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:07:00Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "660", "uid": "cc238c92-41bd-4c7f-9361-adc77718b161" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:47Z", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "3562", "uid": "d83652b0-c701-4c0a-83cf-bd670a76525b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:26Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1900", "uid": "2fe76c48-1318-4145-8e85-515137eb61e5" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:19Z", "name": "aws-ebs-csi-driver-operator-role", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1425", "uid": "13138987-c96f-4b51-8147-6eeb354155f9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps", "secrets", "persistentvolumeclaims" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "watch", "list", "get", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "get", "create", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:03Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "763", "uid": "0fa62a66-4315-47ee-9dfc-93c018b86e7f" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:00Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "640", "uid": "58dd0f61-7e83-431f-862f-f0c72033bd8d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:09Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "981", "uid": "cf41f75a-7bba-4b2e-ba63-d4070a210fe6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:07:19Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1344", "uid": "147bc11d-13f7-464c-bda2-41dde4177c70" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:22:32Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "14279", "uid": "f3823b6c-7efd-4ee1-be30-bb8011f6602c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:12Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1068", "uid": "eb24fa58-34fc-472f-95b8-99621731a52e" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:16Z", "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1250", "uid": "4d021f13-934d-448e-88a0-77409449337f" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts", "services", "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:02Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "749", "uid": "567feca2-63df-441a-b482-eff78492529b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"include.release.openshift.io/self-managed-high-availability\":\"true\",\"kubernetes.io/description\":\"Grant access to monitor the cluster-version operator's metrics.\"},\"name\":\"prometheus-k8s\",\"namespace\":\"openshift-cluster-version\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n", "kubernetes.io/description": "Grant access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-04-30T17:06:51Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "resourceVersion": "516", "uid": "ea83169e-918a-4445-ae27-038b9858c09f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:07:09Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "957", "uid": "1e49dc76-ebec-48e0-b983-2dca3bbb8a1a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kube-cloud-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1823", "uid": "37a72fc9-e1ba-435b-baf5-7cbbce3ad5f9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1811", "uid": "e9f1f712-c8c5-4abd-80e1-2e2d91c1e835" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "create", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1818", "uid": "04b16a18-14e4-4420-a264-0292ecd44ece" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:23Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1735", "uid": "c7fe0684-46dc-4989-858a-e07c1e9a1097" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:07Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "888", "uid": "095fa309-650f-4501-8dc7-00cb0d3a01e5" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "csr-controller-ca" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "openshift.io/description": "Can read the openshift-network-features ConfigMap values" }, "creationTimestamp": "2026-04-30T17:08:05Z", "name": "openshift-network-public-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4205", "uid": "badc6f37-ad4c-4b46-90dd-e38f1508fc64" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-network-features" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:22Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "1644", "uid": "9bcd545b-eb86-4440-afda-343d52a72adb" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "oauth-serving-cert" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:21Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1579", "uid": "e33c4109-57af-4a77-954a-2be602614b0b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1825", "uid": "87652419-0d64-4071-af00-f84bd9eba9bc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-30T17:07:22Z", "name": "coreos-pull-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1665", "uid": "e170f746-f528-4b7e-9d42-8b51a0f86233" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:53Z", "name": "dedicated-admins-project-request", "namespace": "openshift-config", "resourceVersion": "5524", "uid": "82e3beaa-0026-459a-8aaf-e92baaa46215" }, "rules": [ { "apiGroups": [ "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:53Z", "name": "dedicated-admins-registry-cas-project", "namespace": "openshift-config", "resourceVersion": "5491", "uid": "a0ce5065-ba71-4e23-9043-c85f521543b5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "registry-cas" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:18Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1337", "uid": "57c8d073-6296-47ff-9a9c-c678a7955c6b" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:21Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1607", "uid": "1bec32d0-7709-449b-a51f-bd5f1c6ae679" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pull-secret", "support" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1840", "uid": "decf8c30-76fd-430c-8e6d-9b579416abd7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "events" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update" ] }, { "apiGroups": [ "console.openshift.io" ], "resources": [ "consolenotifications" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "olmconfigs" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:37Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "2671", "uid": "5662c03c-46de-4339-847e-2446931203fe" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1827", "uid": "ff103774-efdf-4ce7-bc63-a6b4f6749481" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1803", "uid": "9b78a05e-19e3-4bd4-86fd-b72224255bdd" }, "rules": [ { "apiGroups": [ "console.openshift.io" ], "resources": [ "consoles" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services", "events", "configmaps", "secrets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes", "routes/custom-host" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:38Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "2908", "uid": "14766ed8-ae89-4ab8-9a31-eafb9ce73ee3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:00Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "661", "uid": "78ad791e-ca2b-4687-9a6f-6a0e10b9fbc5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:57Z", "name": "dedicated-admins-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "5643", "uid": "52a9fa0c-e449-4107-9e70-850dba7cace8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "prometheuses", "prometheusrules", "servicemonitors", "podmonitors", "thanosrulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "alertmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "extensions", "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "pods", "replicationcontrollers", "replicationcontrollers/scale", "services" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "deployments", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests" ], "verbs": [ "*" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:57Z", "name": "prometheus-k8s-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "5640", "uid": "4ed1a646-eb1c-4253-bd72-ef59a5952e0c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:19:29Z", "labels": { "olm.managed": "true" }, "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "uid": "8aa6cb17-07fe-4ffb-a0d9-578fe4ca487e" } ], "resourceVersion": "10270", "uid": "459d0098-1447-4fd8-948e-e762a0dfff80" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:19:55Z", "labels": { "olm.managed": "true", "olm.owner": "deployment-validation-operator.v0.1.595-gbf89fe8", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-deployment-validation-operator", "olm.permissions.hash": "3vL2pKeIvLo5JPkyLuA3nWCfoliMwNiwwG0HQ7", "operators.coreos.com/deployment-validation-operator.openshift-deployment-validation": "" }, "name": "deployment-validation-op-7rLkLi3Nk0YvyK9xTCUeUEoOvQKqfsPU8GLVFH", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "300dce36-4378-4617-9e1a-03ddee65e32e" } ], "resourceVersion": "10508", "uid": "593cf294-eb9d-4ebb-960d-fb1d77eb8ecd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "services" ], "verbs": [ "get", "create", "list", "delete", "update", "watch", "patch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:19:54Z", "labels": { "olm.managed": "true" }, "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "457a2e9f-26e5-45d0-96b5-53ed5702c696" } ], "resourceVersion": "10436", "uid": "4f263165-e789-43e4-a5a8-86c122ae96fd" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "deployment-validation-operator.v0.1.595-gbf89fe8" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:09Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "982", "uid": "eb9fd995-8c14-46b6-9f22-193fa54413f8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:07Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "893", "uid": "c186559d-69bf-4973-a21d-b9eb38cc3200" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:19Z", "name": "dedicated-admins-openshift-dns", "namespace": "openshift-dns", "resourceVersion": "6287", "uid": "f8beeb81-e262-4cd7-9e53-df608f1bea74" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:24Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "1822", "uid": "fedd919d-a6dc-4ee2-a613-1279fbac90cd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:32Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd-applicationset" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "18228", "uid": "610ef2b5-efe3-40b9-98e5-77747b7898d5" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "71338", "uid": "177f699b-c6b8-403f-b63f-71a6b713856a" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "*" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backuprepositories.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backupstoragelocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "bundles.trust.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificaterequests.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificates.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "challenges.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "cloudstorages.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusterissuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datadownloads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "dataprotectionapplications.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datauploads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "deletebackuprequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "downloadrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "ec-defaults" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "issuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "istiocsrs.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "kueues.kueue.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "orders.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumebackups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumerestores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "restores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "schedules.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "serverstatusrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "syncerservices.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonmulticlusterproxyaaes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonschedulers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempomonolithics.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempostacks.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "volumesnapshotlocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "*" ] }, { "apiGroups": [ "bindings.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "eventing.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "flows.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "messaging.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sources.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "17966", "uid": "c132decc-92b4-4c81-a8f9-411d78852fda" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "18044", "uid": "f7f7dde1-910a-4bc0-836b-9282e39042c0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "nonroot-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "18038", "uid": "fbafe25c-9b69-4fa1-ac0e-065f622ce14d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "nonroot-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "18028", "uid": "43e20bd2-e3b8-4e6d-9f44-c439eb584fa7" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:30Z", "name": "openshift-gitops-read", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "8908e958-edaa-42c8-b4ff-882267ae790f" } ], "resourceVersion": "17955", "uid": "379adcbb-ba8e-42e3-aaff-40542092e423" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:19Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1408", "uid": "92bddb80-eac9-49da-9f66-0be281148a32" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "replicasets", "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:22Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1670", "uid": "c01e222a-2589-452d-857e-fa673b398264" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "privileged" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:04Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "819", "uid": "ac715d51-e643-481b-80b1-f8366f40963a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:18Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1309", "uid": "0af101fe-7ffa-41d6-986b-8cf6189107af" }, "rules": [ { "apiGroups": [ "operator.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:37Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "2773", "uid": "116cfef5-df02-4c58-8e2a-4db4e7dc1e9b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:29Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "2022", "uid": "870a5043-8b67-499d-b59c-62c57cc0696d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:22Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1674", "uid": "142bdf36-1a0a-469e-abe4-ee36609de96a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "gather" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "delete", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:23Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1709", "uid": "3b985a03-ba11-486c-9d39-99cc5302963f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:26Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1878", "uid": "2a98fe88-2a27-4372-9186-fd334f0cc680" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:37Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "2673", "uid": "6ca8e517-98b3-4519-aa0b-b30b96842550" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:03Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "761", "uid": "3314ebfe-bd52-4e74-8d0d-78382293b9ee" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:21Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1604", "uid": "2014cbba-80d5-4699-a115-906d21d681dd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:00Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "671", "uid": "ac870c52-dcde-404d-b8d2-9af74d88f394" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:59Z", "labels": { "app.kubernetes.io/name": "kueue", "control-plane": "controller-manager" }, "name": "kueue-leader-election-role", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "kueue.openshift.io/v1", "kind": "Kueue", "name": "cluster", "uid": "ec94054a-0f97-4764-93c1-b14a74addb8e" } ], "resourceVersion": "38634", "uid": "77b9fdde-37e6-4f9f-9621-04e680c6a54c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:16Z", "labels": { "olm.managed": "true" }, "name": "kueue-operator.v1.2.0", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "kueue-operator.v1.2.0", "uid": "1805c12b-f1c8-4e0e-9a60-0203623b0af6" } ], "resourceVersion": "28240", "uid": "0ccb2172-fb6a-4994-871a-3628bb52dbc0" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "kueue-operator.v1.2.0" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:17Z", "labels": { "olm.managed": "true", "olm.owner": "kueue-operator.v1.2.0", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-kueue-operator", "olm.permissions.hash": "7PCK2Ya7eRmthKC3OHZysH1HDcDZA52ZseltlR", "operators.coreos.com/kueue-operator.openshift-kueue-operator": "" }, "name": "kueue-operator.v1.2.0-op-77yGYZPVf2uU3xFbuW447JQKzE98BMGk8As0St", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "kueue-operator.v1.2.0", "uid": "43f38d4f-9c41-41ab-9060-76ffa908ec9f" } ], "resourceVersion": "28482", "uid": "cdac749a-9556-457e-b420-010af1d67146" }, "rules": [ { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:40:59Z", "name": "prometheus-k8s", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "kueue.openshift.io/v1", "kind": "Kueue", "name": "cluster", "uid": "ec94054a-0f97-4764-93c1-b14a74addb8e" } ], "resourceVersion": "38640", "uid": "4e2567eb-acb6-4c21-96f7-dc21f03e517c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:53Z", "name": "dedicated-admins-openshift-logging", "namespace": "openshift-logging", "resourceVersion": "5521", "uid": "df508a04-c7aa-4bf2-a9ae-bf88495cf08b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "events", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "logging.openshift.io" ], "resources": [ "clusterloggings" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "persistentvolumeclaims" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:10Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1009", "uid": "0753eca1-c732-491c-ae6e-a5f3708988c0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-autoscaler-status" ], "resources": [ "configmaps" ], "verbs": [ "delete", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:01Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "689", "uid": "48c7469c-073f-4b73-8168-7c82bd0f2933" }, "rules": [ { "apiGroups": [ "autoscaling.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "cluster.k8s.io", "machine.openshift.io" ], "resources": [ "machinedeployments", "machinesets" ], "verbs": [ "watch", "list", "get", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors", "prometheusrules" ], "verbs": [ "watch", "list", "get", "create", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:14Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1186", "uid": "cf787808-2f41-4dee-9df4-6ff4c1597426" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:14Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1139", "uid": "f58f8249-eac1-48bc-a87e-a2236a7aa0ec" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:07Z", "labels": { "olm.managed": "true" }, "name": "17a99d6ca47a679fb33d2c518bf850bfc45a326865bcabba4ffdde75335ea6a", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "17a99d6ca47a679fb33d2c518bf850bfc45a326865bcabba4ffdde75335ea6a", "uid": "bd8bd858-4e58-4cfb-ab0b-258615516013" } ], "resourceVersion": "17443", "uid": "f7b2111e-e19e-40db-b15e-4631c593d1df" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "17a99d6ca47a679fb33d2c518bf850bfc45a326865bcabba4ffdde75335ea6a" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:27Z", "labels": { "olm.managed": "true" }, "name": "2bb52b92bd31ddf2ebbc335370ac517be50e61a93c2fe375393413c19d32cf3", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "2bb52b92bd31ddf2ebbc335370ac517be50e61a93c2fe375393413c19d32cf3", "uid": "e1da8191-0c01-4627-90d4-dd5eec2a0c23" } ], "resourceVersion": "28781", "uid": "be66659a-57b6-492b-acc3-cb8b00e0946a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "2bb52b92bd31ddf2ebbc335370ac517be50e61a93c2fe375393413c19d32cf3" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:41Z", "labels": { "olm.managed": "true" }, "name": "6f1b31efcfb27140ad3ba60d3ef8fffb4185f63fa7eda365f5cf70c1d2bab04", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "6f1b31efcfb27140ad3ba60d3ef8fffb4185f63fa7eda365f5cf70c1d2bab04", "uid": "12642c3b-1436-4be6-b5f4-9179d8b46d96" } ], "resourceVersion": "22171", "uid": "524cd545-219c-43c1-a386-320533fbe985" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "6f1b31efcfb27140ad3ba60d3ef8fffb4185f63fa7eda365f5cf70c1d2bab04" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:19Z", "labels": { "olm.managed": "true" }, "name": "6fa94cc867fd4b7cd2b57b3adb6c70863c3f997f1312062f3f4347b4e9e79c1", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "6fa94cc867fd4b7cd2b57b3adb6c70863c3f997f1312062f3f4347b4e9e79c1", "uid": "6af51a80-3c00-42fc-8f5c-aa61225fecfb" } ], "resourceVersion": "20749", "uid": "3d7706f9-9f42-450e-963b-9b0d4059d58f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "6fa94cc867fd4b7cd2b57b3adb6c70863c3f997f1312062f3f4347b4e9e79c1" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:57Z", "labels": { "olm.managed": "true" }, "name": "b907a0434c1bb16654b385f035a234aee19031a8e0c5174cd9d865dbef71955", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "b907a0434c1bb16654b385f035a234aee19031a8e0c5174cd9d865dbef71955", "uid": "52f259cd-3390-4dab-8ccf-96374c660c76" } ], "resourceVersion": "29949", "uid": "2dbfdc6c-e6a9-4390-84bc-cbcf3bd06a62" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "b907a0434c1bb16654b385f035a234aee19031a8e0c5174cd9d865dbef71955" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:06Z", "labels": { "olm.managed": "true" }, "name": "ce8ccf6534d606d518f4f4250a4442ca27390d7cdd890e51634d9c66fcb63e5", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ce8ccf6534d606d518f4f4250a4442ca27390d7cdd890e51634d9c66fcb63e5", "uid": "1a1c7bbf-74ab-4ae7-9104-9e44b6bd3561" } ], "resourceVersion": "27981", "uid": "30702657-6b4d-4812-91c0-85feb81040d2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "ce8ccf6534d606d518f4f4250a4442ca27390d7cdd890e51634d9c66fcb63e5" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:18Z", "name": "dedicated-admins-openshift-marketplace", "namespace": "openshift-marketplace", "resourceVersion": "6283", "uid": "47a23c53-8ca9-4746-b89b-cdd54e33f3df" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "catalogsources" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:14Z", "name": "backplane-cee", "namespace": "openshift-monitoring", "resourceVersion": "6108", "uid": "8b85bd42-d157-4cec-b56e-bdc71f63e736" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:10Z", "name": "backplane-lpsre", "namespace": "openshift-monitoring", "resourceVersion": "5950", "uid": "5c43515b-7702-486b-8419-7fee82e761a7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:35Z", "name": "backplane-mcs-tier-two", "namespace": "openshift-monitoring", "resourceVersion": "5161", "uid": "a30078ef-5f40-4b7c-9cfb-5512616d0e64" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:33Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-metrics-api", "namespace": "openshift-monitoring", "resourceVersion": "12345", "uid": "0909107d-3272-406a-9523-ee78c2b9d8b5" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "k8s" ], "resources": [ "prometheuses/api" ], "verbs": [ "get", "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:16Z", "labels": { "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1260", "uid": "b9646f1c-ba8e-4f57-a4ca-3e340bacd6b8" }, "rules": [ { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules", "alertrelabelconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules/finalizers", "alertingrules/status" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:24Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1838", "uid": "323c4c0f-279d-4a61-8116-932f40825f63" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:09:53Z", "name": "dedicated-admins-hostedcluster-uwm", "namespace": "openshift-monitoring", "resourceVersion": "5498", "uid": "d4393c9d-d57b-4159-8901-ba05b98bd361" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmap" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "configmap" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:33Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-edit", "namespace": "openshift-monitoring", "resourceVersion": "12317", "uid": "491a7a55-6770-49b7-8cdc-3ae9b676796a" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:33Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-view", "namespace": "openshift-monitoring", "resourceVersion": "12333", "uid": "083a2e1c-823b-4435-afd9-bec97470d26c" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:34Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "12443", "uid": "5914e8fe-6093-405a-b1b5-de7168e66c03" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:34Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "12405", "uid": "d0c63519-bfbe-47e4-9304-2c3f3bed9e68" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:53Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "3845", "uid": "7550210a-9c6a-4527-9b61-5678b3bec20a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:50Z", "name": "whereabouts-cni", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "3648", "uid": "73bf2b97-bef6-4a7e-95b2-f16b6ee8888e" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:11:05Z", "name": "backplane-cee-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6947", "uid": "af0139f8-dfac-4da5-b0f3-8d9ab84fb907" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:48Z", "name": "backplane-csm-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6609", "uid": "a183e13a-1e28-4e3a-adbd-bf6ae411f6b5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:11:00Z", "name": "backplane-lpsre-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6913", "uid": "5d4ca22b-3ff7-4986-b4eb-a5753897ed32" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "list", "get" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "list", "get", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:32Z", "name": "backplane-mcs-tier-two-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6474", "uid": "e02220dc-7666-466e-bf24-e9c4dd953ec6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:45Z", "name": "backplane-mobb-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6580", "uid": "ef66b24c-667d-430b-8df5-914e3c89649f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:46Z", "name": "backplane-srep-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6590", "uid": "b65e5d29-600d-4599-be87-164d18dea644" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:48Z", "name": "backplane-tam-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6614", "uid": "07c7402a-ce33-4e0e-92cc-c63df2dd4bcf" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:08:02Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4151", "uid": "f5c6db29-9579-4bec-93bd-41e973d31d71" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:08:04Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4186", "uid": "9129aa3f-0183-41ed-a006-3d91f233b9db" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:08:06Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4250", "uid": "22e13381-c1ae-41c5-a6b2-adebf3d700f0" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:16Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1221", "uid": "19be5d2c-27f1-4f7b-b25c-3036096282c3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:06:07Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "462", "uid": "e4a9c69b-bec0-4117-824e-6b5cc8c9af23" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:18Z", "name": "dedicated-admins-openshift-operators", "namespace": "openshift-operators", "resourceVersion": "6276", "uid": "b7754568-16db-48ef-9916-b2b46524f964" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans", "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:23Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.15.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-5yq98q77b9Ijrzm2ucW0rzIgBCWF42EnzNx6WI", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.15.4", "uid": "43aa58b8-0d7c-4f68-b3e9-879d4563376c" } ], "resourceVersion": "18861", "uid": "d0a4fb89-f379-473e-a2de-3ef7d073b558" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:26Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.15.4", "uid": "43aa58b8-0d7c-4f68-b3e9-879d4563376c" } ], "resourceVersion": "18544", "uid": "4f0be236-9ceb-4cab-997b-bb08bcea90c4" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-gitops-operator-controller-manager-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:20Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "17599", "uid": "9f1109c2-85de-48c0-971a-76439edf6f81" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:31:19Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.15.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.15.4", "uid": "ff1fe9c1-73bd-4d21-92ed-ec09fe8cb9b2" } ], "resourceVersion": "17545", "uid": "3cfd17fd-3c40-47af-bfa1-758ba6377e77" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-gitops-operator.v1.15.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:36:25Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-read", "namespace": "openshift-operators", "resourceVersion": "30907", "uid": "e39ea037-caf1-4815-91dc-6a3dec302e5a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:36:25Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v5.0.5-806", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v5.0.5-806", "uid": "6bfc2ef4-444a-435e-81d9-c5a723cd3cdb" } ], "resourceVersion": "30909", "uid": "689c2690-78d6-4869-a20d-a956a1a331f1" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-pipelines-operator-rh.v5.0.5-806" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:36:26Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "30974", "uid": "eb72e64c-2e2e-472e-8734-8a7e43ae8021" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-operator-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:58Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4025", "uid": "3d31481f-6d6c-473a-8baf-5a1b3e48bd4e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "create", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:56Z", "name": "openshift-ovn-kubernetes-node-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "3990", "uid": "f151858e-e613-4ff0-a0d0-07b00b83dd38" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:08:01Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d35dabb5-49ba-4782-915f-521dfb218101" } ], "resourceVersion": "4076", "uid": "244e7758-406b-4ac3-a579-1d9160ca46c1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:openshift-pipelines/chains-secret-admin", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:openshift-pipelines/chains-secret-admin\"},\"name\":\"chains-secret-admin\",\"namespace\":\"openshift-pipelines\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"secrets\"],\"verbs\":[\"list\",\"create\",\"get\",\"update\",\"patch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:35:28Z", "name": "chains-secret-admin", "namespace": "openshift-pipelines", "resourceVersion": "28874", "uid": "4a47fe73-5aff-47f9-b0c8-304c4d2f52f7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "create", "get", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:36Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-pipelines", "resourceVersion": "71336", "uid": "a4f8f27a-0534-4395-940c-e98be3908c4f" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "*" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backuprepositories.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backupstoragelocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "bundles.trust.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificaterequests.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificates.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "challenges.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "cloudstorages.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusterissuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datadownloads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "dataprotectionapplications.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datauploads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "deletebackuprequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "downloadrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "ec-defaults" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "issuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "istiocsrs.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "kueues.kueue.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "orders.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumebackups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumerestores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "restores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "schedules.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "serverstatusrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "syncerservices.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonmulticlusterproxyaaes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonschedulers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempomonolithics.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempostacks.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "volumesnapshotlocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "*" ] }, { "apiGroups": [ "bindings.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "eventing.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "flows.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "messaging.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sources.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:36Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-pipelines", "resourceVersion": "26556", "uid": "34423445-ca37-4d52-ba30-8514ed5fe865" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:07:20Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "openshift-route-controllers", "namespace": "openshift-route-controller-manager", "resourceVersion": "1519", "uid": "a8170039-f88f-41d6-b368-d426df490319" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "openshift-route-controllers" ], "resources": [ "leases" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:07:07Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "905", "uid": "043a7b0a-f3dc-4473-b85d-effeaa1a070d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:20:55Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "11140", "uid": "0f4c9fe0-2825-4a1d-8f94-b6b7ffe50279" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets", "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:12Z", "name": "dedicated-admins-user-workload-monitoring-create-cm", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "6010", "uid": "29f8caaa-4756-4266-b73b-63656b02cf0a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:10:12Z", "name": "dedicated-admins-user-workload-monitoring-manage-am-secret", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "6015", "uid": "ecb04807-3daa-427a-b1f3-e77d897e03e6" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "alertmanager-user-workload" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:33Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-reader", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12294", "uid": "72b4ffb2-892c-4d9b-8504-a6eaf8e6ae09" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:33Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-writer", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12309", "uid": "01affdd6-fba4-4ff5-84ee-44d00f6ef9f4" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:34Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12460", "uid": "05c2f8e5-161e-4817-88cb-f39db4afce81" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:39Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-user-workload", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "26672", "uid": "dd5d10e0-78ea-4635-9dc4-85592a6d40dc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:39Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-user-workload-config", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "26663", "uid": "4a74f1d4-66ee-4b07-8a82-ca714fe2fd07" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:21:32Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "user-workload-monitoring-config-edit", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12270", "uid": "cb88d153-b3b6-45ba-9eb3-7ca5830dc1b7" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "user-workload-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:07:20Z", "name": "copied-csv-viewer", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "d95f16c7-1693-4850-b5e1-bb54a79f5117" } ], "resourceVersion": "1515", "uid": "af9d1e5c-eb85-49a9-87d8-31c551c3c378" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-30T17:06:07Z", "name": "shared-resource-viewer", "namespace": "openshift", "resourceVersion": "457", "uid": "aeeb3444-db92-4ceb-ba85-101c835abc58" }, "rules": [ { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive-logging/grafana", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive-logging/grafana\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/instance\":\"grafana\",\"app.kubernetes.io/name\":\"grafana\",\"app.kubernetes.io/version\":\"12.4.3\",\"helm.sh/chart\":\"grafana-11.6.1\"},\"name\":\"grafana\",\"namespace\":\"product-kubearchive-logging\"},\"rules\":[]}\n" }, "creationTimestamp": "2026-04-30T17:38:11Z", "labels": { "app.kubernetes.io/instance": "grafana", "app.kubernetes.io/name": "grafana", "app.kubernetes.io/version": "12.4.3", "helm.sh/chart": "grafana-11.6.1" }, "name": "grafana", "namespace": "product-kubearchive-logging", "resourceVersion": "34297", "uid": "bb1ad962-1fa4-4eef-bac2-bc271c4f7117" }, "rules": null }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-api-url-reader", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-api-url-reader\"},\"name\":\"kubearchive-api-url-reader\",\"namespace\":\"product-kubearchive\"},\"rules\":[{\"apiGroups\":[\"\"],\"resourceNames\":[\"kubearchive-api-url\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:36:22Z", "name": "kubearchive-api-url-reader", "namespace": "product-kubearchive", "resourceVersion": "30705", "uid": "307423b6-d8b1-4f0d-bdfb-a76b91276ba2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kubearchive-api-url" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-operator-leader-election", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-operator-leader-election\"},\"labels\":{\"app.kubernetes.io/component\":\"operator\",\"app.kubernetes.io/name\":\"kubearchive-operator-leader-election\",\"app.kubernetes.io/part-of\":\"kubearchive\",\"app.kubernetes.io/version\":\"v1.21.3\"},\"name\":\"kubearchive-operator-leader-election\",\"namespace\":\"product-kubearchive\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:36:22Z", "labels": { "app.kubernetes.io/component": "operator", "app.kubernetes.io/name": "kubearchive-operator-leader-election", "app.kubernetes.io/part-of": "kubearchive", "app.kubernetes.io/version": "v1.21.3" }, "name": "kubearchive-operator-leader-election", "namespace": "product-kubearchive", "resourceVersion": "30703", "uid": "33882b6a-0128-42ac-8a14-7ea7e7b9f0ad" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-vacuum", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:rbac.authorization.k8s.io/Role:product-kubearchive/kubearchive-vacuum\"},\"labels\":{\"app.kubernetes.io/component\":\"operator\",\"app.kubernetes.io/name\":\"kubearchive-vacuum\",\"app.kubernetes.io/part-of\":\"kubearchive\",\"app.kubernetes.io/version\":\"v1.21.3\"},\"name\":\"kubearchive-vacuum\",\"namespace\":\"product-kubearchive\"},\"rules\":[{\"apiGroups\":[\"kubearchive.org\"],\"resources\":[\"sinkfilters\",\"clustervacuumconfigs\"],\"verbs\":[\"get\",\"list\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:36:22Z", "labels": { "app.kubernetes.io/component": "operator", "app.kubernetes.io/name": "kubearchive-vacuum", "app.kubernetes.io/part-of": "kubearchive", "app.kubernetes.io/version": "v1.21.3" }, "name": "kubearchive-vacuum", "namespace": "product-kubearchive", "resourceVersion": "30704", "uid": "f539281e-2982-4933-a904-bfa2a38846eb" }, "rules": [ { "apiGroups": [ "kubearchive.org" ], "resources": [ "sinkfilters", "clustervacuumconfigs" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "project-controller-in-cluster-local:rbac.authorization.k8s.io/Role:project-controller/project-controller-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"project-controller-in-cluster-local:rbac.authorization.k8s.io/Role:project-controller/project-controller-leader-election-role\"},\"labels\":{\"app.kubernetes.io/component\":\"rbac\",\"app.kubernetes.io/created-by\":\"project-controller\",\"app.kubernetes.io/instance\":\"leader-election-role\",\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"role\",\"app.kubernetes.io/part-of\":\"project-controller\"},\"name\":\"project-controller-leader-election-role\",\"namespace\":\"project-controller\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:33:17Z", "labels": { "app.kubernetes.io/component": "rbac", "app.kubernetes.io/created-by": "project-controller", "app.kubernetes.io/instance": "leader-election-role", "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "role", "app.kubernetes.io/part-of": "project-controller" }, "name": "project-controller-leader-election-role", "namespace": "project-controller", "resourceVersion": "20564", "uid": "b65c7d8d-fa48-4139-97d1-bcf09fee30a6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "release-in-cluster-local:rbac.authorization.k8s.io/Role:release-service/release-service-configurator" }, "creationTimestamp": "2026-04-30T17:33:49Z", "name": "release-service-configurator", "namespace": "release-service", "resourceVersion": "22875", "uid": "0b26c446-541d-4d2b-adfb-153697674452" }, "rules": [ { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseserviceconfigs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "release-in-cluster-local:rbac.authorization.k8s.io/Role:release-service/release-service-leader-election-role" }, "creationTimestamp": "2026-04-30T17:33:49Z", "name": "release-service-leader-election-role", "namespace": "release-service", "resourceVersion": "22874", "uid": "c2942997-dd3b-4e08-aeef-be54f56fba8d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-leader-election-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-leader-election-role\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"tekton-kueue\"},\"name\":\"tekton-kueue-leader-election-role\",\"namespace\":\"tekton-kueue\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"coordination.k8s.io\"],\"resources\":[\"leases\"],\"verbs\":[\"get\",\"list\",\"watch\",\"create\",\"update\",\"patch\",\"delete\"]},{\"apiGroups\":[\"\"],\"resources\":[\"events\"],\"verbs\":[\"create\",\"patch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:37:22Z", "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "tekton-kueue" }, "name": "tekton-kueue-leader-election-role", "namespace": "tekton-kueue", "resourceVersion": "33372", "uid": "b81d1909-50d5-4db0-a3a1-df26886e2ec0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-metrics-read", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-metrics-read\"},\"name\":\"tekton-kueue-metrics-read\",\"namespace\":\"tekton-kueue\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:37:01Z", "name": "tekton-kueue-metrics-read", "namespace": "tekton-kueue", "resourceVersion": "32847", "uid": "c96a1af3-24b1-4660-ba23-345aed531c39" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-webhook-role", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-kueue/tekton-kueue-webhook-role\"},\"name\":\"tekton-kueue-webhook-role\",\"namespace\":\"tekton-kueue\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"configmaps\"],\"verbs\":[\"list\",\"watch\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:37:22Z", "name": "tekton-kueue-webhook-role", "namespace": "tekton-kueue", "resourceVersion": "33371", "uid": "6d375ea8-d901-4a76-9fbc-e22f6cdc2ae2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-logging/pipeline-service-sre-manage-vector-pods", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-logging/pipeline-service-sre-manage-vector-pods\"},\"name\":\"pipeline-service-sre-manage-vector-pods\",\"namespace\":\"tekton-logging\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]},{\"apiGroups\":[\"apps\"],\"resources\":[\"daemonsets\"],\"verbs\":[\"get\",\"list\",\"watch\",\"delete\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:35:28Z", "name": "pipeline-service-sre-manage-vector-pods", "namespace": "tekton-logging", "resourceVersion": "28879", "uid": "0086528b-7f10-420c-8340-a286f2c7189d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "watch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:37Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "tekton-results", "resourceVersion": "71335", "uid": "513957d8-4512-4fbc-ba42-12c23165ff73" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "*" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates", "certificaterequests", "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges", "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "*" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions/status" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "components" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "componentdetectionqueries" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backuprepositories.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backuprepositories" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backupstoragelocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "backupstoragelocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "bundles.trust.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "trust.cert-manager.io" ], "resources": [ "bundles" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificaterequests.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certificates.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "certificates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "certmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "certmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "challenges.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "challenges" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "cloudstorages.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "cloudstorages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusterissuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "clusterissuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datadownloads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datadownloads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "dataprotectionapplications.oadp.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "oadp.openshift.io" ], "resources": [ "dataprotectionapplications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "datauploads.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "datauploads" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "deletebackuprequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "deletebackuprequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "downloadrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "downloadrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "ec-defaults" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "enterprisecontractpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "issuers.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "istiocsrs.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "kubearchive.org" ], "resources": [ "clusterkubearchiveconfigs", "clustervacuumconfigs", "kubearchiveconfigs", "namespacevacuumconfigs", "sinkfilters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "kueues.kueue.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "orders.acme.cert-manager.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumebackups.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "podvolumerestores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releases" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplans" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "appstudio.redhat.com" ], "resources": [ "releaseplanadmissions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "restores.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "schedules.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "serverstatusrequests.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "syncerservices.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonmulticlusterproxyaaes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonschedulers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempomonolithics.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tempostacks.tempo.grafana.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustmanagers.operator.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "volumesnapshotlocations.velero.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "cert-manager.io" ], "resources": [ "issuers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "istiocsrs" ], "verbs": [ "*" ] }, { "apiGroups": [ "bindings.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "eventing.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "flows.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "messaging.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sinks.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "sources.knative.dev" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "cleanuppolicies", "clustercleanuppolicies", "policies", "clusterpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "wgpolicyk8s.io" ], "resources": [ "policyreports", "clusterpolicyreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "reports.kyverno.io" ], "resources": [ "ephemeralreports", "clusterephemeralreports" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kyverno.io" ], "resources": [ "updaterequests" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "kueue.openshift.io" ], "resources": [ "kueues" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "acme.cert-manager.io" ], "resources": [ "orders" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumebackups" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "podvolumerestores" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "restores" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "schedules" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "serverstatusrequests" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "syncerservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonmulticlusterproxyaaes" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonschedulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempomonolithics" ], "verbs": [ "*" ] }, { "apiGroups": [ "tempo.grafana.com" ], "resources": [ "tempostacks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.openshift.io" ], "resources": [ "trustmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "velero.io" ], "resources": [ "volumesnapshotlocations" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:34:37Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "tekton-results", "resourceVersion": "26571", "uid": "ac2f07a5-eaab-46e5-b84d-71646d18623c" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-results/pipeline-service-sre-exec-pprof-data", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-results/pipeline-service-sre-exec-pprof-data\"},\"name\":\"pipeline-service-sre-exec-pprof-data\",\"namespace\":\"tekton-results\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"pod/exec\"],\"verbs\":[\"get\",\"list\",\"create\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:35:28Z", "name": "pipeline-service-sre-exec-pprof-data", "namespace": "tekton-results", "resourceVersion": "28876", "uid": "41212db9-610d-4004-92c1-4f4891a94607" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pod/exec" ], "verbs": [ "get", "list", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:35:50Z", "name": "storage-role", "namespace": "tekton-results", "resourceVersion": "29715", "uid": "2b3ff2dd-4def-43fb-81ce-9adbf7dec9e1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get" ] }, { "apiGroups": [ "minio.min.io" ], "resources": [ "tenants" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-results/tekton-results-info", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:rbac.authorization.k8s.io/Role:tekton-results/tekton-results-info\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-info\",\"app.kubernetes.io/part-of\":\"tekton-results\",\"app.kubernetes.io/version\":\"devel\"},\"name\":\"tekton-results-info\",\"namespace\":\"tekton-results\"},\"rules\":[{\"apiGroups\":[\"\"],\"resourceNames\":[\"tekton-results-info\"],\"resources\":[\"configmaps\"],\"verbs\":[\"get\",\"describe\"]}]}\n" }, "creationTimestamp": "2026-04-30T17:35:28Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "devel" }, "name": "tekton-results-info", "namespace": "tekton-results", "resourceVersion": "28880", "uid": "9d9d7b93-2824-434e-b033-40e6256fd1df" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-results-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:34Z", "labels": { "olm.managed": "true", "operators.coreos.com/tempo-product.tempo-operator": "" }, "name": "tempo-operator-controller-service-cert", "namespace": "tempo-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "tempo-operator.v0.20.0-3", "uid": "735977eb-eeb7-4d58-901d-c1f8788b6c59" } ], "resourceVersion": "21580", "uid": "d7a56564-87ef-4fb7-89e6-b0e84168d33c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tempo-operator-controller-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-30T17:33:31Z", "labels": { "app.kubernetes.io/managed-by": "operator-lifecycle-manager", "app.kubernetes.io/name": "tempo-operator", "app.kubernetes.io/part-of": "tempo-operator", "olm.managed": "true" }, "name": "tempo-operator-prometheus", "namespace": "tempo-operator", "resourceVersion": "21422", "uid": "bc860a40-e03b-4964-86e0-0a15947c3b44" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:30Z", "labels": { "olm.managed": "true" }, "name": "tempo-operator.v0.20.0-3", "namespace": "tempo-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "tempo-operator.v0.20.0-3", "uid": "ef4431c9-9595-479c-99c2-7e2c44a443d9" } ], "resourceVersion": "21360", "uid": "dfeda51b-066f-4c65-bf71-5499a9852993" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "tempo-operator.v0.20.0-3" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-30T17:33:33Z", "labels": { "olm.managed": "true", "olm.owner": "tempo-operator.v0.20.0-3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tempo-operator", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/tempo-product.tempo-operator": "" }, "name": "tempo-operator.v0.20.0-3-90meOMbVKfW64WsEv1Vf3b5w7LY2M7UmCnq9HZ", "namespace": "tempo-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "tempo-operator.v0.20.0-3", "uid": "735977eb-eeb7-4d58-901d-c1f8788b6c59" } ], "resourceVersion": "22342", "uid": "6c2faaab-48b2-49b5-9e7a-0fcc5fbb4b7e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }