{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:14Z", "name": "machine-config-controller-events", "namespace": "default", "resourceVersion": "8946", "uid": "9f67542d-35cf-4240-adfe-fc51b1e974df" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-controller-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:50Z", "name": "machine-config-daemon-events", "namespace": "default", "resourceVersion": "7201", "uid": "3536caae-3f26-406b-9ebd-c932aa35558d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-daemon-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:25Z", "name": "machine-os-builder-events", "namespace": "default", "resourceVersion": "9642", "uid": "399192f6-4171-4c48-8e29-164d07ae8e08" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-os-builder-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:14Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "22820", "uid": "7a73296e-5edc-4454-afe1-505ec4c8605c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "default", "resourceVersion": "16886", "uid": "4198a1cf-8c77-4835-8806-46953fc08141" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "default", "resourceVersion": "16883", "uid": "93cf1b5e-6f72-483e-a14e-c60b742ec7ff" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-pullers", "namespace": "default", "resourceVersion": "16880", "uid": "578d9bd7-800f-4d76-9e83-53339eb9a552" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "kube-node-lease", "resourceVersion": "16920", "uid": "3808eaf1-3a0c-4eaa-b94b-402cd1b3e189" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "kube-node-lease", "resourceVersion": "16881", "uid": "9d51befa-6a79-4c3b-8bf6-51752fc9bf56" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-pullers", "namespace": "kube-node-lease", "resourceVersion": "16923", "uid": "9456f172-fe14-4718-9a7c-29986a3339e3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "251", "uid": "d88b07a1-79ec-4ff1-99e2-0eb83a9fdfb6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:bootstrap-signer" }, "subjects": [ { "kind": "ServiceAccount", "name": "bootstrap-signer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "kube-public", "resourceVersion": "16882", "uid": "2d185d3e-30b4-4bbe-8f66-55c67a9ffe3d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "kube-public", "resourceVersion": "16879", "uid": "1ee8011b-23d0-46f5-ae43-cce61d438e04" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-pullers", "namespace": "kube-public", "resourceVersion": "16887", "uid": "13880cd8-369e-4b09-bb74-f6ed51d710b1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:51Z", "name": "authentication-reader-for-authenticated-users", "namespace": "kube-system", "resourceVersion": "7265", "uid": "cc6d3463-9eda-430d-ac69-63071d242d4f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:56Z", "name": "cloud-controller-manager", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2695", "uid": "9952538f-7f9d-4a42-b54d-40772ff5c315" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:57Z", "name": "cloud-controller-manager:apiserver-authentication-reader", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2717", "uid": "e9680374-0d12-474c-8ee7-0d391a89c5d5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:58Z", "name": "console", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18879", "uid": "916db802-6028-4242-8111-35de18b7f805" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18877", "uid": "dac09787-4f4d-449b-af5a-75c50fe5b8e8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:16Z", "name": "csi-snapshot-controller-operator-authentication-reader", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1656", "uid": "4587cad8-d524-415c-bab5-83ee5cc8b169" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller-operator", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "insights-operator-auth", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1034", "uid": "1712eb0b-e955-436b-8a56-3a8b5533919c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:15:09Z", "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "metrics-server-auth-reader", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "metrics-server-auth-reader", "namespace": "kube-system", "resourceVersion": "14503", "uid": "6bae35a1-7d8a-4915-bcf0-235a2f0f13c4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "metrics-server", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:40Z", "name": "network-diagnostics", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3547", "uid": "577a09f0-469c-4f8e-a923-2e2c9061213e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-24T12:28:49Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-registration:agent", "namespace": "kube-system", "resourceVersion": "38989", "uid": "c1408033-702b-431c-8c74-18beb6c769ea" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet:extension-apiserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-24T12:28:51Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-work:agent", "namespace": "kube-system", "resourceVersion": "39094", "uid": "e13a89db-cedd-4238-a30e-32990d2c4b2c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet:extension-apiserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:34Z", "labels": { "olm.managed": "true" }, "name": "packageserver-service-auth-reader", "namespace": "kube-system", "resourceVersion": "10045", "uid": "44979cc1-107a-4101-a2b3-c3942597a10b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:14Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "22828", "uid": "60f41718-1332-469d-95a2-35e4684b0777" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "241", "uid": "df820e43-bb00-4893-a588-7b93cd27ac24" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" }, { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "242", "uid": "51c1ca00-f61e-4b4d-bcb0-1f4d4485504a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-controller-manager" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" }, { "kind": "ServiceAccount", "name": "kube-controller-manager", "namespace": "kube-system" }, { "kind": "ServiceAccount", "name": "leader-election-controller", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "243", "uid": "dabcb7d4-559c-4303-a0bc-251f0b33891f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-scheduler" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" }, { "kind": "ServiceAccount", "name": "kube-scheduler", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "248", "uid": "cd47bf94-9899-4b1d-b3e1-bc69f16f6f66" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:bootstrap-signer" }, "subjects": [ { "kind": "ServiceAccount", "name": "bootstrap-signer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "249", "uid": "32c4dfad-bdaa-4598-8f13-c9836dd0de7e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:cloud-provider" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-provider", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:06:57Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "250", "uid": "10c72f04-8848-42e9-87f4-765ab5902b1b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:token-cleaner" }, "subjects": [ { "kind": "ServiceAccount", "name": "token-cleaner", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "kube-system", "resourceVersion": "16917", "uid": "996a9b57-e124-498f-94af-d90347d395a4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "kube-system", "resourceVersion": "16884", "uid": "777eaea8-f0e5-4d7a-837a-ab53a724ecd7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-pullers", "namespace": "kube-system", "resourceVersion": "16924", "uid": "c38160c3-d04a-450b-8597-59318a55eda2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:50Z", "name": "system:openshift:controller:kube-apiserver-check-endpoints", "namespace": "kube-system", "resourceVersion": "7192", "uid": "7ceed443-5599-4455-9474-c41c170dc921" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:serviceaccount:openshift-kube-apiserver:check-endpoints" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:37Z", "name": "system:openshift:leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "5918", "uid": "2f242011-f292-4741-890a-0a82b5098d69" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-controller-manager" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:40Z", "name": "system:openshift:leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "6373", "uid": "0c61b7ce-2ff4-4f67-8051-06ac0e6bb75d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-scheduler" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:32Z", "name": "system:openshift:leader-locking-openshift-controller-manager", "namespace": "kube-system", "resourceVersion": "5167", "uid": "9d16cacc-901e-40d2-b109-88e910390000" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-locking-openshift-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-controller-manager-sa", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:48Z", "name": "system:deployers", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "38951", "uid": "43e60974-be35-4ae0-87d4-5c8a6ea07cfa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:48Z", "name": "system:image-builders", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "38956", "uid": "175ad015-de8c-4bf0-bf49-83c8cb24ce42" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:47Z", "name": "system:image-pullers", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "38913", "uid": "6924ff37-70f1-4d59-a62d-a64971d3c952" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-24T12:28:48Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-registration:agent", "namespace": "open-cluster-management-agent", "resourceVersion": "38949", "uid": "0d7c4450-cf47-4390-89fe-de52031d0aa0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet-registration:agent" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-24T12:28:50Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-work:agent", "namespace": "open-cluster-management-agent", "resourceVersion": "39066", "uid": "260be210-16d8-4b8b-b400-7e440be6421d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet-work:agent" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:47Z", "name": "system:deployers", "namespace": "open-cluster-management-agent", "resourceVersion": "38895", "uid": "51d7b017-cc16-4d4c-a59d-8606af8f64a2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:49Z", "name": "system:image-builders", "namespace": "open-cluster-management-agent", "resourceVersion": "38971", "uid": "8fcce7bf-534f-448f-89d8-ae942f618667" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-24T12:28:46Z", "name": "system:image-pullers", "namespace": "open-cluster-management-agent", "resourceVersion": "38850", "uid": "83588de1-4f09-417a-95c5-b71a4049791f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1040", "uid": "b9689f0d-e4a7-453f-b9a2-4fe2060cc4e9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "openshift-apiserver-operator", "resourceVersion": "16974", "uid": "92b35eb3-10df-455d-8308-f1748501a845" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-apiserver-operator", "resourceVersion": "17016", "uid": "da8b4249-b442-41b0-bcaf-9a14a070fdea" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-apiserver-operator", "resourceVersion": "17063", "uid": "b329286c-e6ea-4cb6-8aa2-3bb76b465035" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:39Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "6283", "uid": "f960ddc2-e0a4-46da-abc3-2d8c6f0f15ad" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-apiserver", "resourceVersion": "17015", "uid": "4475bb83-3519-4f4d-ade6-00e367768075" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "openshift-apiserver", "resourceVersion": "17011", "uid": "97a74023-f096-4dcd-a05a-ae405219249e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-apiserver", "resourceVersion": "17014", "uid": "1cf07d4f-ed8b-4ac7-9e7d-e2defb14d52a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:45Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "6791", "uid": "66604066-cb4a-42f2-9900-7f1362e8f6d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-authentication-operator", "resourceVersion": "17062", "uid": "389228db-2a3a-4158-bf6f-d9c0aef57c6c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-authentication-operator", "resourceVersion": "17012", "uid": "3eeabc48-db8d-4287-b6c0-a41262f2a1b1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-authentication-operator", "resourceVersion": "17065", "uid": "8007f59b-513d-4bfc-bc4e-26617ffc4575" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:46Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "6821", "uid": "87fed004-3052-4a6c-a9a7-a6e4f149512a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-authentication", "resourceVersion": "17064", "uid": "99d682ec-57aa-4558-85f4-140ddec7ea1c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-authentication", "resourceVersion": "17013", "uid": "07bf72c5-77fd-4e5b-bd62-6a9ccc1d1019" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-authentication", "resourceVersion": "17061", "uid": "6595de15-0b04-4bbb-9287-195e3cfaa58b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:41Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-leader-election-rolebinding", "namespace": "openshift-catalogd", "resourceVersion": "6483", "uid": "d3b645e0-cc44-464d-ad54-aa24f43971df" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-leader-election-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "catalogd-controller-manager", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-catalogd", "resourceVersion": "17066", "uid": "042697f0-7a95-48bf-b84e-4c4b78de1594" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-catalogd", "resourceVersion": "17010", "uid": "bbf82d48-3709-4084-92ba-ee799a97a3dc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-catalogd", "resourceVersion": "17060", "uid": "47ec1809-8700-4420-8320-2439f8b4613a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:53Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2634", "uid": "b08f4dd8-1a97-4b61-a2c4-aef7d6c4d9f4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "17103", "uid": "09656bb3-6bb4-415e-93fb-db89e780b820" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "17100", "uid": "623ff7e4-92fe-4fb9-b115-dd43c3797f74" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "17192", "uid": "9c16baf9-cc3b-4b81-877a-17953d459408" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:55Z", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2676", "uid": "40982fdb-c610-451a-b515-d1d8880ec3cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:54Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2656", "uid": "1426ed98-8d77-40af-bb7e-46406bd2dc3a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "17041", "uid": "9588c8c7-eb39-430e-8d44-be899bed32db" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "17101", "uid": "405f5fa3-7571-4e14-9988-47d2c945c292" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "17097", "uid": "9bc0ebac-21d4-40e3-84c1-2c65f20fb326" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:49Z", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2578", "uid": "3ec5ee95-5bc3-49af-8a48-f8eaa5b690a5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-credential-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:17:09Z", "name": "pod-identity-webhook", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "16266", "uid": "22d42dab-03e4-4095-999e-3c45e485437d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pod-identity-webhook" }, "subjects": [ { "kind": "ServiceAccount", "name": "pod-identity-webhook", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:00Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "859", "uid": "0091d649-a5de-49a3-8e94-2d00db6ba526" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "17191", "uid": "2eb4d613-a8b5-40ba-8286-59903bdb5207" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "17102", "uid": "d217b578-00f4-4039-8d21-5686bc405724" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "17140", "uid": "846d1611-0d94-4b2b-b2ae-573cb4cce846" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:20Z", "name": "cloud-network-config-controller-rb", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "2992", "uid": "646fa07e-c380-43c7-af6f-3c83d31d2f81" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-network-config-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "17136", "uid": "086ef3df-1dc7-4dc9-b59f-7f9b909e108f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "17137", "uid": "a97b13f0-7298-4734-ad28-0cda089c0af0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "17195", "uid": "e73652fc-b72c-4425-ba89-c4b3ac4d5488" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "17194", "uid": "cc125eac-ed27-4b33-a536-5faa4afcacf0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "17099", "uid": "d8fe5ba3-a254-41b0-a57a-f83275b5d682" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "17138", "uid": "0e48b361-7644-46ba-9138-bdab66feaf1c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:40Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "6389", "uid": "f1fef19a-755f-4dcb-b77a-23375742f241" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-lease-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-controller-sa", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:31Z", "name": "aws-ebs-csi-driver-operator-rolebinding", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "4910", "uid": "ad415811-5af4-49a2-8931-e42c39f9fa88" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-operator", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:37Z", "name": "aws-ebs-csi-driver-prometheus", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "5884", "uid": "ae495cd2-03b2-42b9-9ec9-0bd8b84259c9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-prometheus" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "17193", "uid": "cb9dcfce-885b-474c-8327-9d159cf6a6ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "17197", "uid": "c18c3bf0-f8df-43b4-ae4e-87e66b74005a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "17250", "uid": "99bc1ce4-219d-407b-bf62-3700023ec486" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:07Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1165", "uid": "bd2f546b-d1a2-4790-b4fc-19d58d618df4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-approver" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-approver-sa", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1037", "uid": "01b05f78-4f1c-4fbd-bd7b-5bb463d44651" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "17249", "uid": "874b71e0-df5d-4e38-b740-75c7496e53ca" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "17196", "uid": "acb8663b-79c5-41ea-9af2-cb191ce9abd5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "17295", "uid": "4c19171a-9d19-4d0d-97aa-fe5c92c03218" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:12Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1381", "uid": "30c186da-37d7-4944-9957-3ade3d693f98" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "17294", "uid": "e5d265fa-57a8-46d2-8c0c-65101934b8a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "17198", "uid": "150a7451-ee68-4ca8-9465-69431f7f94c0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "17293", "uid": "fbdabca5-8a4e-46d4-85f1-e9dfdebc7a4c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "17345", "uid": "ece2328e-b51b-4c9e-980b-15dee90376ef" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "17248", "uid": "73533ca0-8de6-4294-81ba-8f0bbad40353" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "17349", "uid": "15357712-d09e-45f4-b13c-8f89ab4d81f8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:25Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1992", "uid": "633aa285-f27e-49a7-8fdf-8750e0ea8572" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-samples-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:19:47Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "22065", "uid": "9615b22c-8271-4bfc-b8fc-18388a89d031" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "17352", "uid": "522a840e-3cc5-4f7a-8d0b-d33d3d52a509" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "17296", "uid": "abd72b99-66f1-4f8d-b979-a687855691a1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "17347", "uid": "e3076e3d-5d4c-4fa4-9cd5-9173d951ca9f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:15Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1562", "uid": "5993d241-1d48-45f3-b882-56bd03f30379" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "csi-snapshot-controller-leaderelection" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:25Z", "labels": { "addonmanager.kubernetes.io/mode": "Reconcile", "kubernetes.io/cluster-service": "true" }, "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1994", "uid": "9fd248e4-6a86-483a-b374-f57a5e3867f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "csi-snapshot-controller-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:07:59Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "839", "uid": "cbca7a53-fb14-4ec3-810f-f948d8faf219" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "17346", "uid": "8418f0ff-0262-4646-af4a-e36944fc0bab" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "17348", "uid": "1e4e74e4-3187-48a8-8617-da468fecca1e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "17435", "uid": "40b24c5f-731a-4c26-bc6f-505fd829526f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "Grant Prometheus access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-01-28T13:07:58Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "780", "uid": "c655ddcb-9ada-4a4f-86ed-2560809aa95c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-cluster-version", "resourceVersion": "17400", "uid": "926a1467-3039-4d53-8dcc-a2c7cf7b5419" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-cluster-version", "resourceVersion": "17350", "uid": "47142649-8cd9-4ebd-84a0-af762dc12950" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-cluster-version", "resourceVersion": "17439", "uid": "2fe089f7-673d-4522-a3b8-96e82f6f348b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:32Z", "name": "aws-ebs-csi-driver-operator-aws-config-clusterrolebinding", "namespace": "openshift-config-managed", "resourceVersion": "5178", "uid": "e0be1776-0093-409b-bdc0-c6605db586b5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-operator-aws-config-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-operator", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:45Z", "name": "cloud-credential-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2536", "uid": "89fa0c5b-724b-411c-a5e6-ff6d6d5cc910" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-credential-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:51Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2599", "uid": "ffe17756-b7f9-425f-b6b2-bcc50bb26c19" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18878", "uid": "fbe20c5d-1810-42bc-b8b3-a2290940eb67" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-configmap-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18867", "uid": "05c46b90-b473-491d-84db-c9692c9ee96f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18869", "uid": "4b37801e-0d3f-4c81-a9ab-167849d88943" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-public" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:27Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2148", "uid": "89be7d10-4fb0-4a7e-94c4-a87e6ee56bc9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator-etc-pki-entitlement" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "name": "machine-api-controllers", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2367", "uid": "87215a28-e04a-4441-9b60-d1b6f13f3fbf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:47Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2549", "uid": "6b652ce8-c220-433d-9fce-1fdc332016b7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-approver" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-approver-sa", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Grants access from any authenticated user to the openshift-network-features ConfigMap" }, "creationTimestamp": "2026-01-28T13:09:41Z", "name": "openshift-network-public-role-binding", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3610", "uid": "17722abe-65e1-45a4-a2b9-0f042f10707d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-network-public-role" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-config-managed", "resourceVersion": "17475", "uid": "33a32c0c-c346-4d52-aab2-2d311164f7ed" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-config-managed", "resourceVersion": "17434", "uid": "837ae614-dee9-4455-9983-33325ae39d83" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-config-managed", "resourceVersion": "17478", "uid": "9ceec75d-975f-4718-96c3-0f11d4628f97" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:55Z", "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "7637", "uid": "5d933c4a-a0d9-432b-849e-17660dde0e42" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:oauth-servercert-trust" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:28Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2194", "uid": "a81d897b-39d4-4ed8-a506-120354d425d5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-config-operator", "resourceVersion": "17436", "uid": "84b132c8-da9a-4eaa-8a5e-cfeb8fa010bf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-config-operator", "resourceVersion": "17437", "uid": "74838e81-2895-4409-a502-6fe118b9c381" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-config-operator", "resourceVersion": "17483", "uid": "d5026979-43b0-4a50-a0ae-accc54ba7b42" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:42Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-manager-rolebinding", "namespace": "openshift-config", "resourceVersion": "6534", "uid": "afef34d1-dcbb-4868-a0fc-dd0fc100b99c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "catalogd-controller-manager", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:49Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2554", "uid": "ce23e87b-ca0e-48c8-8e08-37637f4afda1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:11:10Z", "name": "cluster-samples-operator-openshift-config-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "8463", "uid": "d84ce637-5e07-44a4-b84f-d971e628f0cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "coreos-pull-secret-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18872", "uid": "a7953aee-948d-45c3-a5dd-336fe5bf5791" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:23Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1920", "uid": "53c5b313-9ab4-436d-b45f-06c6b304f6d1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ingress-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "ingress-operator", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:24Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1954", "uid": "6078361a-257a-4da0-97ab-f213442f7215" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "name": "machine-api-controllers", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2365", "uid": "176486ee-e3b2-45d5-9c43-85d85051f4f2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:48Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "operator-controller-manager-rolebinding", "namespace": "openshift-config", "resourceVersion": "6987", "uid": "1e3b6e4c-929f-4032-88c5-619454077238" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-config", "resourceVersion": "17438", "uid": "f4cab229-a914-4409-a6e4-07b1a2f0f44b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-config", "resourceVersion": "17351", "uid": "a778e2b2-15de-4876-8582-adda637bec55" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-pullers", "namespace": "openshift-config", "resourceVersion": "17440", "uid": "ae24a2ac-c6b7-4948-8806-066b0e69568f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18864", "uid": "3f6c2931-7b83-4cc4-b1ef-b40f5e94d8d2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:18:03Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "19095", "uid": "95aa37da-8fa4-4ce3-ae93-d5be4251f53f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:52Z", "name": "system:deployers", "namespace": "openshift-console-operator", "resourceVersion": "18778", "uid": "ecf04bc5-cbb5-4e47-ad04-db8b887752f6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:52Z", "name": "system:image-builders", "namespace": "openshift-console-operator", "resourceVersion": "18780", "uid": "edb3bb2e-2f5d-415d-846e-3119be9079b4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:52Z", "name": "system:image-pullers", "namespace": "openshift-console-operator", "resourceVersion": "18779", "uid": "f5442206-411c-454f-9a13-a431a8ba7d48" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:56Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18846", "uid": "97ba061b-22a3-4936-8493-cfdb8ec5febe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-user-settings-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:53Z", "name": "system:deployers", "namespace": "openshift-console-user-settings", "resourceVersion": "18803", "uid": "ab477acf-cb28-42e0-b239-84c6fa745ba1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:53Z", "name": "system:image-builders", "namespace": "openshift-console-user-settings", "resourceVersion": "18804", "uid": "c4bd61f2-9527-4791-b403-c4c4618098e6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:53Z", "name": "system:image-pullers", "namespace": "openshift-console-user-settings", "resourceVersion": "18805", "uid": "dd51b492-1665-4e7d-bb05-2910636807d6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18859", "uid": "12e9e7a0-e64a-4be1-94a5-c939f68c6e7e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:18:03Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "19097", "uid": "708a1076-fed4-4c84-8824-59887f24f2d1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:51Z", "name": "system:deployers", "namespace": "openshift-console", "resourceVersion": "18749", "uid": "e30b9476-afe9-4c61-a4d2-8df00e4a9323" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:51Z", "name": "system:image-builders", "namespace": "openshift-console", "resourceVersion": "18748", "uid": "e8e83d05-4ba9-4118-82cb-e31233502073" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:51Z", "name": "system:image-pullers", "namespace": "openshift-console", "resourceVersion": "18747", "uid": "7b79661a-6c77-4323-8e15-77e74a1e0d95" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1038", "uid": "e3cc6f02-ba97-4153-8463-8f59a32b30b7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-controller-manager-operator", "resourceVersion": "17482", "uid": "7fb6e853-b79f-4082-a0d9-2ed03cc783a2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-controller-manager-operator", "resourceVersion": "17480", "uid": "d231622d-dd0f-4f45-8628-11ba5894bac5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-controller-manager-operator", "resourceVersion": "17515", "uid": "b3b3245d-85a6-4c1c-a528-089e9307a866" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:32Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "5877", "uid": "d1eaa0e9-e825-4d76-8770-43973790c5fc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:deployers", "namespace": "openshift-controller-manager", "resourceVersion": "17481", "uid": "380126e4-50b4-4f5e-87d2-502e140a1c96" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-controller-manager", "resourceVersion": "17479", "uid": "9c3cc5ba-9197-42eb-bd9a-cc34461858b8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-controller-manager", "resourceVersion": "17575", "uid": "f761581a-28af-4072-91cd-d324dd46f381" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:34Z", "name": "system:openshift:leader-locking-openshift-controller-manager", "namespace": "openshift-controller-manager", "resourceVersion": "5431", "uid": "8b315483-d3d8-49f8-a27e-31fa221d30d6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-locking-openshift-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-controller-manager-sa", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:07Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1178", "uid": "ca7f1df9-4620-4e4f-9cb9-e31e998cdd0a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "dns-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "dns-operator", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:08Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1201", "uid": "f89e3982-0cb9-4f7e-aa4c-8db284e63bfb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-dns-operator", "resourceVersion": "17517", "uid": "c2c5a51d-aeee-4448-96d3-c2380599bcf4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-dns-operator", "resourceVersion": "17574", "uid": "bd6757e7-a419-4d8f-960e-1dfaa16a7aee" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-dns-operator", "resourceVersion": "17578", "uid": "6ec18ad5-09be-4423-9fd8-86ce2d731daf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:13Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "8819", "uid": "0c015579-51b8-495d-86c7-cdf2de64d3ee" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-dns", "resourceVersion": "17514", "uid": "15034c57-2410-449c-975b-d89e5d6b9ebe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:24Z", "name": "system:image-builders", "namespace": "openshift-dns", "resourceVersion": "17477", "uid": "d7b52bf9-be8d-4af4-af5d-a250a98dbb15" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-dns", "resourceVersion": "17516", "uid": "326e9b1f-0788-423d-9ad5-f9ff69f8d789" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "prometheus-k8s", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1035", "uid": "f61592b2-1c4d-43e2-8ec5-08d09f9b2f86" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-etcd-operator", "resourceVersion": "17571", "uid": "f49e1280-c451-4cbd-a0dc-3ccd110ed1ac" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-etcd-operator", "resourceVersion": "17569", "uid": "198da496-baab-424e-a6d5-4f07a006e216" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-etcd-operator", "resourceVersion": "17632", "uid": "ac7ecc1f-84f6-4f49-b816-ce084aad5b15" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:38Z", "name": "prometheus-k8s", "namespace": "openshift-etcd", "resourceVersion": "6121", "uid": "4022708b-d1db-4287-a115-c212009c6fa4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-etcd", "resourceVersion": "17570", "uid": "80da96bf-8f76-41e1-b7a5-b61c6115b0c1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-etcd", "resourceVersion": "17576", "uid": "97427023-2490-4c72-bea4-abc93085833e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-etcd", "resourceVersion": "17568", "uid": "66c65c52-385f-4c74-b081-8f954401f021" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-host-network", "resourceVersion": "17577", "uid": "e59bbaa4-d410-45dc-8a82-aa2ef9e00e0b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-host-network", "resourceVersion": "17572", "uid": "37a16ade-81e9-4787-b48e-8e63413eefcc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-host-network", "resourceVersion": "17636", "uid": "06c743a7-96e5-4465-b67e-810acd197512" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:25Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1987", "uid": "853f1907-53dd-4c8b-9969-d4828a0919ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-image-registry-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-image-registry-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:27Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2124", "uid": "0f890021-ca2a-4280-8657-9445662ed5a8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "node-ca" }, "subjects": [ { "kind": "ServiceAccount", "name": "node-ca", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:07Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1163", "uid": "6ee3c586-edfc-4893-89d3-dc1cfdd19e32" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-image-registry", "resourceVersion": "17634", "uid": "15896c79-cac9-4046-bde4-67c8b969259b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-image-registry", "resourceVersion": "17573", "uid": "9788f152-cb80-46d7-9168-d0d4ffe53cb0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-image-registry", "resourceVersion": "17678", "uid": "a3ec0688-c623-4ea2-a3ab-83fe7e43bb07" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-infra", "resourceVersion": "17635", "uid": "18b3cab0-4b09-4f83-b5de-0cd3fce6f569" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-infra", "resourceVersion": "17680", "uid": "f5991124-a3fc-4105-9ae0-656286a305a5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-infra", "resourceVersion": "17677", "uid": "e65ac753-3894-4c55-a0ce-6a3c298d01a6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:32Z", "name": "system:openshift:sa-creating-openshift-controller-manager", "namespace": "openshift-infra", "resourceVersion": "5177", "uid": "e8d25bce-bed7-4bdb-8a96-b14c730670d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-creating-openshift-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-controller-manager-sa", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:32Z", "name": "system:openshift:sa-creating-route-controller-manager", "namespace": "openshift-infra", "resourceVersion": "5123", "uid": "8488a924-40bd-4b23-a052-3f0761b8669a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-creating-route-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "route-controller-manager-sa", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-ingress-canary", "resourceVersion": "17708", "uid": "88c87dfd-fc36-4e3d-9c55-21fe45c3ad1b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-ingress-canary", "resourceVersion": "17707", "uid": "b5ad8b47-92cc-44f7-b83e-997c48069774" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-ingress-canary", "resourceVersion": "17706", "uid": "71087631-e4b5-4d96-baeb-330b501ffdd2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:20Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1781", "uid": "13e0d072-91b2-4175-b20e-cd18b25342a8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ingress-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "ingress-operator", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:00Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "842", "uid": "d948aa11-fbfd-4eaa-ba92-4ff56ed64072" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-ingress-operator", "resourceVersion": "17679", "uid": "ada11225-cbf5-4e9d-86b2-d2d19d627f68" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-ingress-operator", "resourceVersion": "17683", "uid": "50a93f58-e896-4c90-bcf9-138631bb2e0a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-ingress-operator", "resourceVersion": "17703", "uid": "0f1cbb8f-6983-46e7-9758-963bca016cac" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:14Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "9052", "uid": "641b427e-8654-4b57-82bb-27bf7e57f9be" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-ingress", "resourceVersion": "17676", "uid": "eaf0f936-00b2-4c72-8642-950156144ce3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-ingress", "resourceVersion": "17684", "uid": "ef022a44-a2a4-471a-8fb2-efa2f2f66e2c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-ingress", "resourceVersion": "17682", "uid": "58b2f00a-864a-4c83-9842-26039310b4e9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:25Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1997", "uid": "1b7376a2-2b4a-404b-b2f5-ac2763ea0407" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:26Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2065", "uid": "860e626c-b644-4a7e-a472-427d4caa3e4c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator-obfuscation-secret" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2371", "uid": "93088beb-9c5c-415f-88ca-f33d5703c76f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-insights", "resourceVersion": "17705", "uid": "c5326b8e-7285-4ca9-b99a-3f8c7c76a8d8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-insights", "resourceVersion": "17681", "uid": "f0afc680-302a-4938-8089-897f6d12717f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-insights", "resourceVersion": "17733", "uid": "97ef947c-e008-4940-95fa-2c75c1c3448c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:29Z", "name": "host-networking-system-node", "namespace": "openshift-kni-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2244", "uid": "ed60298e-a7e6-40ca-b26e-35c78b5aa406" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kni-infra", "resourceVersion": "17704", "uid": "e9080212-00af-4d08-96ef-b0f3feea73c0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kni-infra", "resourceVersion": "17735", "uid": "260a1234-31f6-461c-b00f-59a13174a390" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kni-infra", "resourceVersion": "17732", "uid": "2b19ea93-1f68-47bd-bf9c-34e577f09e27" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:00Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "850", "uid": "de5b8b6f-93b1-4ea3-862f-b4261578d0a6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "17738", "uid": "8153afc0-9b4a-4483-a162-6239ab55f3b3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "17734", "uid": "29f02ca5-3438-4f77-bed1-0f814abe2d19" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "17766", "uid": "0f46ff44-3d2b-4665-b5c6-f785efa0ab1d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:20Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1765", "uid": "c951aa41-9dd2-41bd-beb5-3f83df26d9af" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-apiserver", "resourceVersion": "17737", "uid": "a90ae2f5-f590-4651-83f2-f064b45af2b4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-apiserver", "resourceVersion": "17736", "uid": "db54abe6-d948-41ba-a1ed-4e6583b6308b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-apiserver", "resourceVersion": "17731", "uid": "048a36fb-8fda-4ee7-974e-f7bb57a9272f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:50Z", "name": "system:openshift:controller:check-endpoints", "namespace": "openshift-kube-apiserver", "resourceVersion": "7211", "uid": "b413dff9-6908-4e6f-84d7-eded0b510806" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:openshift:controller:check-endpoints" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:serviceaccount:openshift-kube-apiserver:check-endpoints" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:00Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "853", "uid": "99a95c72-d4b0-44b9-97ab-784361c0804e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "17768", "uid": "e4df3d73-d054-4225-a4cb-99e4061d5220" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "17769", "uid": "ddc04b75-a013-4a3c-af9b-fc0dbc772922" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "17819", "uid": "bce1dfed-edbf-4a71-8529-5f2a4409bd85" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:19Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1732", "uid": "f15e59e9-05c4-4870-974c-fe7df0e6f334" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-controller-manager", "resourceVersion": "17770", "uid": "22cdadde-5e15-4588-bd9c-44cfd287de02" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-controller-manager", "resourceVersion": "17730", "uid": "4af150f6-dc1e-4432-bfbc-aa8712533e8d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-controller-manager", "resourceVersion": "17767", "uid": "04fad43c-f51c-4011-9393-9516983e8d94" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:37Z", "name": "system:openshift:leader-election-lock-cluster-policy-controller", "namespace": "openshift-kube-controller-manager", "resourceVersion": "5928", "uid": "66f996ee-717e-4898-969d-867e03507d2d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-election-lock-cluster-policy-controller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:03Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1039", "uid": "29bf82e2-c94d-4805-8042-8c7985247e20" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "17794", "uid": "80523e1d-08b7-402e-b439-1c523d1db655" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "17824", "uid": "9590a731-64b6-4fc1-8996-6dba7ed915a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "17820", "uid": "570f5a7b-1248-429d-af72-91b7934cd770" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:20Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1794", "uid": "36b41629-b9a3-4ea3-ab81-69cf9b8d1323" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-scheduler", "resourceVersion": "17771", "uid": "be560d9f-1311-4b3d-8a2a-0ce2df959314" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-scheduler", "resourceVersion": "17825", "uid": "c9596c00-4f75-462d-a650-f18f1315daa6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-scheduler", "resourceVersion": "17797", "uid": "311be917-54dd-4771-b0e5-2fee1fb293ab" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:40Z", "name": "system:openshift:sa-listing-configmaps", "namespace": "openshift-kube-scheduler", "resourceVersion": "6388", "uid": "30b5d4bf-9068-41d7-958c-858d0b14c04f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-listing-configmaps" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "17827", "uid": "373b4d82-dbc0-4227-ab97-1a52fd93021f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "17796", "uid": "f4b76742-98f4-4c40-99c6-d9a8811c18c0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "17852", "uid": "019d322f-351c-4511-bfd8-fa5068a36407" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "17828", "uid": "f45f14fb-5d80-4e24-8982-552f951a5299" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "17795", "uid": "e160f1a6-d9f4-45de-b04f-829f4e952467" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-pullers", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "17826", "uid": "c79747e9-6665-42ca-9b8d-886e73d2240a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:54Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2658", "uid": "b230d5de-0dbc-4138-bbd4-8f6aeaf92521" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-autoscaler" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-autoscaler", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:47Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2541", "uid": "1857f25a-84f3-4429-85ad-41f2578b6103" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-autoscaler-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "name": "cluster-baremetal-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2295", "uid": "419d1b05-6368-459c-8e82-169409b2b9da" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-baremetal-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-baremetal-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:49Z", "name": "control-plane-machine-set-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2556", "uid": "1cd0724c-a584-49d0-9015-fdf94c0614c6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "control-plane-machine-set-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "control-plane-machine-set-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "name": "machine-api-controllers", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2364", "uid": "3ec18a8e-aa28-46c1-90e9-24ebe6da34d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "name": "machine-api-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2372", "uid": "a5c05059-97f3-463c-8026-6e1200c8eaac" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:55Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2674", "uid": "86babf94-e2c2-498e-8ac9-491269f9cec1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-cluster-autoscaler-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:29Z", "name": "prometheus-k8s-cluster-baremetal-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2218", "uid": "4483d8d2-6c69-43c2-b495-85e89c1f6471" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-cluster-baremetal-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:32Z", "name": "prometheus-k8s-machine-api-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2377", "uid": "5ed056ec-9e1e-4503-bd22-7ae185d54613" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-machine-api-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-machine-api", "resourceVersion": "17823", "uid": "39989533-6bce-4708-9c96-bed75b9c8715" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:image-builders", "namespace": "openshift-machine-api", "resourceVersion": "17822", "uid": "97b8dec5-1770-4ac6-ad37-6fa355a793d6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-machine-api", "resourceVersion": "17849", "uid": "269bbe38-4a77-4346-a319-8bb2c132b6b7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:14Z", "name": "machine-config-controller-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "8959", "uid": "47d11952-b2b6-4ce0-ad0b-247ffec38b11" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-controller-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:51Z", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator", "resourceVersion": "7250", "uid": "1b849d37-aef9-4a8b-9eae-3ba57903f9b3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-config-daemon" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:50Z", "name": "machine-config-daemon-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "7212", "uid": "829543e6-2af9-42ff-b938-bc14a25bedff" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-daemon-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:25Z", "name": "machine-os-builder-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "9648", "uid": "00d08b2d-077b-4f19-8fcc-72cff4dd6ca3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-os-builder-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:14Z", "name": "machine-os-puller-binding", "namespace": "openshift-machine-config-operator", "resourceVersion": "9048", "uid": "d7df6402-7b8d-4f07-91eb-c7cd8cf27a21" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-puller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:14Z", "name": "mcc-prometheus-k8s", "namespace": "openshift-machine-config-operator", "resourceVersion": "8995", "uid": "f1dbeaf5-1ad5-412f-9973-d15354e88eb4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "mcc-prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:50Z", "name": "mcd-prometheus-k8s", "namespace": "openshift-machine-config-operator", "resourceVersion": "7228", "uid": "35434b54-3b92-49d7-805b-3212e5eedaa8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "mcd-prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:26Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2079", "uid": "c8527e75-6031-4613-8f41-a89bfb6d6a84" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:25Z", "name": "system:deployers", "namespace": "openshift-machine-config-operator", "resourceVersion": "17821", "uid": "ff8196dc-06a2-428f-b685-238a3959c9c5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-machine-config-operator", "resourceVersion": "17851", "uid": "add00a6e-85ec-4a5a-92cc-e72186bedf20" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-machine-config-operator", "resourceVersion": "17876", "uid": "f5c690b8-0f88-45c4-86e2-651cdc949210" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:10Z", "name": "marketplace-operator", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1292", "uid": "964091f4-b2e0-43ad-84d4-1056171708db" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "marketplace-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "marketplace-operator", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:11:28Z", "name": "openshift-marketplace-metrics", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "9760", "uid": "9d00d86a-5b10-4d98-a7aa-09cd658666d4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-marketplace-metrics" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-marketplace", "resourceVersion": "17846", "uid": "7198462e-1e21-4bae-b7b6-cf736d8e1745" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-marketplace", "resourceVersion": "17850", "uid": "35cb7518-9d47-4808-8c48-4113e2af1cbd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-marketplace", "resourceVersion": "17874", "uid": "3be8bdbb-a867-4e18-b485-25dad43e9239" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:13Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "alertmanager-prometheusk8s", "namespace": "openshift-monitoring", "resourceVersion": "22776", "uid": "57391875-7e9a-472a-bb12-0e5a4c7146e4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "monitoring-alertmanager-edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:23Z", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1926", "uid": "eed17a74-a014-4513-8dc1-f47823ef3e6c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-monitoring-operator-namespaced" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:24Z", "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1979", "uid": "72767e0f-4993-4cbb-af30-3b1feea3ed1f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-monitoring-operator-alert-customization" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:57Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "18876", "uid": "c47c5bc3-f932-4285-b35f-ae9f7376f87d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:18Z", "name": "insights-operator-alertmanager", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1704", "uid": "9c63c698-8c1c-4efe-8784-7982f884cd52" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "monitoring-alertmanager-edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:14Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "22830", "uid": "b1c3ed80-8f0d-4bc7-bedb-8d4e675f3a7f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:14Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "22838", "uid": "21850196-f686-47e0-a735-dd6034be3f79" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-config" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-monitoring", "resourceVersion": "17879", "uid": "1a554e15-d8a5-4160-af9a-09e8abc8b471" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-monitoring", "resourceVersion": "17875", "uid": "8e63b388-4289-413a-94fb-872fe923e35c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-monitoring", "resourceVersion": "17847", "uid": "8482d246-2eb7-4be6-80bf-6e9021bd9a3c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:24Z", "name": "multus-whereabouts", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3115", "uid": "830c36d6-19f0-45fb-8a45-ed69e14ee3a9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "whereabouts-cni" }, "subjects": [ { "kind": "ServiceAccount", "name": "multus-ancillary-tools", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:27Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3225", "uid": "6bd89ad6-4c58-4b5a-affb-76bc0842e5c2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-multus", "resourceVersion": "17877", "uid": "b41a98a7-3d52-470f-8935-f356321c9457" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-multus", "resourceVersion": "17868", "uid": "6890db92-77c5-490b-8cbf-2aef83fafe16" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-multus", "resourceVersion": "17870", "uid": "5d13f720-21fc-4045-94e9-33996a45139c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:20:24Z", "name": "system:deployers", "namespace": "openshift-network-console", "resourceVersion": "23221", "uid": "5e04122b-0a8c-4dd1-92f3-bbfa1370e2d2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:20:24Z", "name": "system:image-builders", "namespace": "openshift-network-console", "resourceVersion": "23223", "uid": "8b00e47f-2049-4790-b723-3058c137fffa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:20:24Z", "name": "system:image-pullers", "namespace": "openshift-network-console", "resourceVersion": "23222", "uid": "1e3f3d8d-b835-4961-9d6c-c1db5ac59fe0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:39Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3537", "uid": "504cb593-50da-461a-ac3f-b3bea4de45a2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "network-diagnostics" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:41Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3575", "uid": "70ab9468-de58-4260-8056-5b24e6445a45" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-network-diagnostics", "resourceVersion": "17873", "uid": "9bd36a21-f45c-4237-95b8-e906aceea819" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-network-diagnostics", "resourceVersion": "17848", "uid": "3ea4999e-89ae-4126-bdb9-f74292c62520" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-network-diagnostics", "resourceVersion": "17880", "uid": "22e87574-cda8-4a33-8251-b8a5d06e5316" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:42Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3643", "uid": "0067f08a-d87a-4fab-a70d-a05ed3c91d14" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "network-node-identity-leases" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-node-identity", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-network-node-identity", "resourceVersion": "17869", "uid": "38b0e472-fd1e-4465-b95a-370321043083" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-network-node-identity", "resourceVersion": "17881", "uid": "3c955eb5-cf3e-4686-8740-cb0e26c5f752" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-network-node-identity", "resourceVersion": "17882", "uid": "faf3d41d-7c9a-4a08-8a82-7c7a3ff2b94c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:43Z", "name": "system:openshift:scc:hostnetwork-v2", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3657", "uid": "a3cae3dd-943b-41c9-8411-6ac7b522f9b5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:openshift:scc:hostnetwork-v2" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-node-identity", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:20Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1779", "uid": "5c275d53-d4f1-41df-b0a5-b37a9fbbed29" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-network-operator", "resourceVersion": "17872", "uid": "80deafa0-e406-4375-be86-6a4f3504b49d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-network-operator", "resourceVersion": "17883", "uid": "c25814d6-6b1c-44fd-894e-e648de1612c0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-network-operator", "resourceVersion": "17922", "uid": "53940bdd-149e-48c7-bea4-1923d6b8b02f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-node", "resourceVersion": "17930", "uid": "5b9390f2-d42c-45c2-be73-6ef31494a82d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-node", "resourceVersion": "17871", "uid": "f12b184f-f67f-4705-989a-04779454874d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-node", "resourceVersion": "17900", "uid": "e5a9002e-4dcf-4b4c-9cb1-4480626506c7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:11:02Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "8143", "uid": "b3e4fca9-3974-40d9-8477-3c270f9afc1e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:node-config-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "name": "host-networking-system-node", "namespace": "openshift-nutanix-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2281", "uid": "70577acb-82f6-4cd4-82f1-8a727ec53779" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-nutanix-infra", "resourceVersion": "17932", "uid": "351a3ffe-ea42-4389-8d63-90327ccb17ea" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-nutanix-infra", "resourceVersion": "17904", "uid": "aaa90e69-b280-4e44-a843-210888cbe5d6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-nutanix-infra", "resourceVersion": "17927", "uid": "75286af5-bd9c-43df-b83e-bcec1a716859" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:46Z", "name": "prometheus-k8s", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "6848", "uid": "3703ff23-1954-412e-a227-58b6076267d3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-oauth-apiserver", "resourceVersion": "17923", "uid": "647b32d6-b038-40c4-85c7-f1f513d9658c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-oauth-apiserver", "resourceVersion": "17902", "uid": "30b52ab1-8102-406c-a8ac-62a7b3f6733a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-oauth-apiserver", "resourceVersion": "17924", "uid": "a67e7c4d-2c88-4fc2-b407-4fd615365076" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:29Z", "name": "host-networking-system-node", "namespace": "openshift-openstack-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2234", "uid": "9bb28486-5533-45b7-b8b6-5ebb1622f0ce" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-openstack-infra", "resourceVersion": "17935", "uid": "6e4bd276-9a96-4072-ac4d-a7e3105535ba" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-openstack-infra", "resourceVersion": "17928", "uid": "5bf347b3-707e-4cb7-a8c3-16bc947865ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-openstack-infra", "resourceVersion": "17903", "uid": "6174d5db-feb0-49db-8749-1c6f528d2834" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:49Z", "name": "operator-controller-leader-election-rolebinding", "namespace": "openshift-operator-controller", "resourceVersion": "7102", "uid": "298f0266-2a80-4bd3-9e0c-e89aa1fc242b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-leader-election-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:49Z", "name": "operator-controller-manager-rolebinding", "namespace": "openshift-operator-controller", "resourceVersion": "7160", "uid": "572d19e8-afba-43ff-9035-5f2e41ed14a2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-operator-controller", "resourceVersion": "17926", "uid": "17291852-665c-4e42-9755-07068eecacfa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-operator-controller", "resourceVersion": "17925", "uid": "98f0c3ed-70e5-4cc9-aada-b9da682b67bd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-operator-controller", "resourceVersion": "17933", "uid": "4eb9df1a-f657-46c1-b59d-df06b45daeb0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:20Z", "name": "collect-profiles", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1787", "uid": "afbbc31a-8e04-4cb8-90d6-ec8a9e7efb67" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "collect-profiles" }, "subjects": [ { "kind": "ServiceAccount", "name": "collect-profiles", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:13Z", "name": "operator-lifecycle-manager-metrics", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1405", "uid": "f1ab17b1-7f72-46bc-94bf-8834916875a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-lifecycle-manager-metrics" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:33Z", "labels": { "olm.managed": "true" }, "name": "packageserver", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "packageserver", "uid": "0d1b1af3-e14c-4d3c-9521-3b6ffe34c196" } ], "resourceVersion": "9993", "uid": "b6d2c7cf-addf-4ea0-a072-1c3c44d5d710" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "packageserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:11:34Z", "labels": { "olm.managed": "true" }, "name": "packageserver-service-cert", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "packageserver", "uid": "143d6963-2b28-42e3-a010-7f8e3240a112" } ], "resourceVersion": "10041", "uid": "d919d099-30bf-40ee-923c-d744636e7c3e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "packageserver-service-cert" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "17970", "uid": "e7765519-be3d-4650-b09b-ab4dd9a04b6d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "17931", "uid": "8f15d8cf-12a4-4541-9c83-362fd6802e9f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "17934", "uid": "c6424a00-6370-47ab-ba23-fa5bf8aa1295" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-operators", "resourceVersion": "17966", "uid": "07973411-1508-45f7-b4fa-001086143af3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-operators", "resourceVersion": "17936", "uid": "0607b603-97c9-4399-9c7c-9198d16b880b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-operators", "resourceVersion": "17973", "uid": "e686c54b-6b95-4a87-b3bc-ce317452d3c2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-ovirt-infra", "resourceVersion": "17971", "uid": "a9c60875-efd8-4070-be03-bddcb20a3ead" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-ovirt-infra", "resourceVersion": "17921", "uid": "5610a30f-4693-4d4b-bc4c-e55f19fbc944" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-ovirt-infra", "resourceVersion": "17977", "uid": "aad67971-2880-4d15-b498-f192239b1f5f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:34Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3354", "uid": "8eb0126e-0615-4a33-aae0-0051cf8abcb4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-ovn-kubernetes-control-plane-limited" }, "subjects": [ { "kind": "ServiceAccount", "name": "ovn-kubernetes-control-plane", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:32Z", "name": "openshift-ovn-kubernetes-nodes-identity-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3340", "uid": "3f643a96-78e1-4043-9c72-ed9b762a0d5a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-ovn-kubernetes-node-limited" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:ovn-nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:09:37Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "b802898b-9e7d-45f2-9820-82a3b660d34c" } ], "resourceVersion": "3412", "uid": "c1272268-f1a6-4fe4-b43f-876b458755f2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "17979", "uid": "e08e3306-9b17-4812-a354-f8e67e3f382a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "17972", "uid": "b7be9503-329f-4371-9c07-354034591fbd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "17978", "uid": "e3fe88ae-5e70-4515-b108-e3470ff7a16e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:10:32Z", "name": "prometheus-k8s", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "6465", "uid": "dd015b64-b2d9-473f-8181-46eb1656be68" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-route-controller-manager", "resourceVersion": "17976", "uid": "e4f6bde5-509e-4e1a-99eb-e2dcaeb231ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-route-controller-manager", "resourceVersion": "17974", "uid": "6781d584-f553-460b-816a-4a358212d3a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-route-controller-manager", "resourceVersion": "17968", "uid": "f6b92b96-7fc5-4bb4-b1fc-1b14d90c196d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:34Z", "name": "system:openshift:leader-locking-openshift-route-controller-manager", "namespace": "openshift-route-controller-manager", "resourceVersion": "5442", "uid": "b7fcae84-d6be-4e7e-8b01-56d2b692cfa1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-locking-openshift-route-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "route-controller-manager-sa", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:07Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1169", "uid": "7f600572-39bc-4720-a2db-97c6ec36fa36" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-service-ca-operator", "resourceVersion": "18002", "uid": "e2a2f7c8-9f9a-4dab-a8cb-36f145681860" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-service-ca-operator", "resourceVersion": "17980", "uid": "abcdc3b9-84ff-4942-a45a-c4805dc13715" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-service-ca-operator", "resourceVersion": "17996", "uid": "f890cc4c-553a-4465-82e6-4453bf61880b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-service-ca", "resourceVersion": "18003", "uid": "f3a12ec8-115c-404a-8f97-37bb512467ed" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-service-ca", "resourceVersion": "17975", "uid": "557bf788-fa18-4579-a2b2-f18327fde2a8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-service-ca", "resourceVersion": "17967", "uid": "abb4d3ff-4d9f-4d1c-99a0-7aa15c1cf104" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:10:30Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "4767", "uid": "125a8ae9-8f60-4cd5-9192-73c31171cf70" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:controller:service-ca" }, "subjects": [ { "kind": "ServiceAccount", "name": "service-ca", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:24Z", "name": "cluster-monitoring-operator", "namespace": "openshift-user-workload-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "1960", "uid": "f9451b72-806c-40d1-86ab-253e5eb80e66" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-monitoring-operator-namespaced" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-01-28T13:20:14Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "22832", "uid": "f47e5618-8863-4edc-b140-ee1524d750af" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "18001", "uid": "2df0bc79-59c6-475f-b2fb-10ff12a155a8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "17969", "uid": "f0be1fa8-2812-457c-a922-af3ec09e183c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "17995", "uid": "f3bcbacc-36e8-401c-b1ee-7248326e9984" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "name": "host-networking-system-node", "namespace": "openshift-vsphere-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "2262", "uid": "a06b4f38-a52a-4534-a19a-ea78880a7e64" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:deployers", "namespace": "openshift-vsphere-infra", "resourceVersion": "18000", "uid": "1fc5d2bd-8ab0-4604-bb12-6b34b1cc7b65" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-builders", "namespace": "openshift-vsphere-infra", "resourceVersion": "17999", "uid": "662cb0b1-84c3-4fec-9086-f6984e78927f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:26Z", "name": "system:image-pullers", "namespace": "openshift-vsphere-infra", "resourceVersion": "18004", "uid": "aeb01956-a8d9-4985-8dcb-9999e31d2539" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:11:09Z", "name": "cluster-samples-operator-openshift-edit", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "8384", "uid": "cf885aed-5652-4eb4-a7ca-ae394bacfbb1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:11:13Z", "name": "copied-csv-viewers", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "0697f795-5c8d-4dd7-b55f-2abb4dc12000" } ], "resourceVersion": "8926", "uid": "fd54d37f-0b45-41fa-bdeb-f57f59a65c73" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "copied-csv-viewer" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-01-28T13:11:02Z", "name": "shared-resource-viewers", "namespace": "openshift", "resourceVersion": "8139", "uid": "991dee8e-515f-4240-bf7d-376c39f88df6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "shared-resource-viewer" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:deployers", "namespace": "openshift", "resourceVersion": "16915", "uid": "470a99d3-6525-4e15-8978-6b697183c216" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-builders", "namespace": "openshift", "resourceVersion": "16885", "uid": "e74ed15b-5ddd-419d-ab91-115fa20c6986" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-01-28T13:17:23Z", "name": "system:image-pullers", "namespace": "openshift", "resourceVersion": "16921", "uid": "9fef75ae-e039-4415-a102-20407bbc4197" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift" } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }