--- apiVersion: cloudcredential.openshift.io/v1 kind: CredentialsRequest metadata: annotations: capability.openshift.io/name: CloudCredential include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-10-31T12:57:05Z" finalizers: - cloudcredential.openshift.io/deprovision generation: 1 managedFields: - apiVersion: cloudcredential.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:ownerReferences: .: {} k:{"uid":"bcbe7957-4a2a-4f11-81da-82dc49cd3f01"}: {} f:spec: .: {} f:providerSpec: .: {} f:apiVersion: {} f:kind: {} f:statementEntries: {} f:secretRef: {} f:serviceAccountNames: {} manager: cluster-version-operator operation: Update time: "2026-10-31T12:57:05Z" - apiVersion: cloudcredential.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:finalizers: .: {} v:"cloudcredential.openshift.io/deprovision": {} manager: cloud-credential-operator operation: Update time: "2026-10-31T12:57:17Z" - apiVersion: cloudcredential.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:lastSyncGeneration: {} f:lastSyncTimestamp: {} f:provisioned: {} manager: cloud-credential-operator operation: Update subresource: status time: "2026-10-31T14:07:17Z" name: openshift-cloud-network-config-controller-aws namespace: openshift-cloud-credential-operator ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: bcbe7957-4a2a-4f11-81da-82dc49cd3f01 resourceVersion: "168330" uid: 8ecbba0c-99ed-46b9-9d02-cb112f6204ed spec: providerSpec: apiVersion: cloudcredential.openshift.io/v1 kind: AWSProviderSpec statementEntries: - action: - ec2:DescribeInstances - ec2:DescribeInstanceStatus - ec2:DescribeInstanceTypes - ec2:UnassignPrivateIpAddresses - ec2:AssignPrivateIpAddresses - ec2:UnassignIpv6Addresses - ec2:AssignIpv6Addresses - ec2:DescribeSubnets - ec2:DescribeNetworkInterfaces effect: Allow resource: '*' secretRef: name: cloud-credentials namespace: openshift-cloud-network-config-controller serviceAccountNames: - cloud-network-config-controller status: lastSyncGeneration: 1 lastSyncTimestamp: "2026-10-31T14:07:17Z" provisioned: true