--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-07-08T17:02:40Z" managedFields: - apiVersion: rbac.authorization.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:ownerReferences: .: {} k:{"uid":"90e57d30-10f7-4960-b4e7-cbc88f043f3a"}: {} f:rules: {} manager: cluster-version-operator operation: Update time: "2026-07-08T17:02:40Z" name: csi-snapshot-controller-operator-clusterrole ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 90e57d30-10f7-4960-b4e7-cbc88f043f3a resourceVersion: "1209" uid: cdb2b637-dfa8-4bed-9fc0-90a0d9f0e707 rules: - apiGroups: - operator.openshift.io resources: - csisnapshotcontrollers verbs: - get - list - watch - create - update - patch - delete - apiGroups: - operator.openshift.io resources: - csisnapshotcontrollers/status verbs: - get - list - watch - create - update - patch - delete - apiGroups: - config.openshift.io resources: - clusteroperators verbs: - get - list - watch - create - update - patch - delete - apiGroups: - config.openshift.io resources: - clusteroperators/status verbs: - get - list - watch - create - update - patch - delete - apiGroups: - config.openshift.io resources: - infrastructures verbs: - get - list - watch - apiGroups: - config.openshift.io resources: - featuregates verbs: - get - list - watch - apiGroups: - config.openshift.io resources: - clusterversions verbs: - get - list - watch - apiGroups: - "" resources: - nodes verbs: - get - list - watch - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - get - list - watch - create - update - patch - delete - apiGroups: - admissionregistration.k8s.io resources: - validatingwebhookconfigurations verbs: - delete - apiGroups: - rbac.authorization.k8s.io resources: - clusterroles - clusterrolebindings verbs: - delete