{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:48Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "12944", "uid": "375258da-67b8-42ce-aa23-4dffa5f11d48" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "261", "uid": "794e8edb-79e7-423b-9236-439414a9ada8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-info" ], "resources": [ "configmaps" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "255", "uid": "7b2c49f7-ed2c-42a1-bb5f-d078d3e61a92" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "extension-apiserver-authentication" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:48Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "12958", "uid": "cb266472-51d6-48c4-a58a-fa445b88c7de" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "259", "uid": "553a8a38-7d74-4209-9f4b-d1e990882e63" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-controller-manager" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "260", "uid": "285fe7e2-ad28-4355-a706-2aa312a5346e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-scheduler" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "256", "uid": "ac107bf7-40cd-4729-8438-50edd9059615" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "257", "uid": "61140324-ba38-4a19-8247-05951793426a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "258", "uid": "86398d39-6065-4bcd-9b70-b7ab19a4c1b3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "watch" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:26Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:leader-election-lock-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "1532", "uid": "5cdb2581-6989-440d-8f82-2cfb678d4875" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:05Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "635", "uid": "9c9e2c2f-addd-4fe2-8e1f-e4b1fef7eade" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:26Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1641", "uid": "78bda2d7-7770-433e-814c-35492a010ea7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:07Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "737", "uid": "7de0eaf3-970d-42cf-a934-040bed625a85" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:43Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "2561", "uid": "7813040b-78ad-4791-ae20-e0633e7fcfd5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:14Z", "name": "backplane-cee-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6518", "uid": "baa834d7-672b-4e37-b884-9b3927f2c178" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:37Z", "name": "backplane-csm-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6749", "uid": "eeec19ce-c5fd-482e-b5e1-dbead89dd604" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:12Z", "name": "backplane-mcs-tier-two-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6470", "uid": "434609b0-05c1-42b0-b4e3-83ac293e097c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:44Z", "name": "backplane-mobb-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6848", "uid": "86083331-72b1-478d-ae6b-8311d9d2e702" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:30Z", "name": "backplane-srep-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6700", "uid": "8add0fcd-f9c8-4362-82bb-b0745fb3f953" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:11Z", "name": "backplane-tam-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6428", "uid": "a79cbe87-1e78-42d6-960f-06020d7aa212" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:09Z", "name": "osd-delete-backplane-script-resources", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6331", "uid": "6d87fe9d-99fc-4b85-978b-c9295b480730" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "serviceaccounts" ], "verbs": [ "get", "list", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:18Z", "name": "cloud-credential-operator-role", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1128", "uid": "8f6a1ddf-5852-407a-aa96-dbb8a28f42d8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "events", "serviceaccounts", "services", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "*" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:04Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "561", "uid": "fd67d560-00e8-4911-9b7b-92a33efb008a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:47Z", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "2650", "uid": "2e0273a6-61b4-482a-af7e-71bfdc550591" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:35Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "2061", "uid": "5bc99b0d-24b9-4578-ba6d-f24202548a5d" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:24Z", "name": "aws-ebs-csi-driver-operator-role", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1396", "uid": "156ba4ad-e1dd-4f79-89c7-c0a92f8193cc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps", "secrets", "persistentvolumeclaims" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "watch", "list", "get", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "get", "create", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:09Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "799", "uid": "6bf8ffe0-7b92-4fc6-b4dc-c54a5383c337" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:07Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "739", "uid": "426018d7-0198-44bb-96b2-048ad05819a6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:15Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1033", "uid": "0a40b42a-8b62-45fb-8e3c-3e27451b6d8d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:24Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1370", "uid": "db6b4bec-ca0b-4cc2-ac3f-6403ee546664" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T17:01:58Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "15642", "uid": "3d99cd88-20bf-46d5-9aa4-19c718c402bd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:17Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1119", "uid": "9acbfe19-2a7d-4c6c-812d-44c88591adf2" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:21Z", "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1231", "uid": "c733ef92-7909-47c6-8b0d-b155bffce56c" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts", "services", "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:07Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "742", "uid": "1d6d5452-fd69-4065-9a64-7a18fcb1ee23" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"include.release.openshift.io/self-managed-high-availability\":\"true\",\"kubernetes.io/description\":\"Grant access to monitor the cluster-version operator's metrics.\"},\"name\":\"prometheus-k8s\",\"namespace\":\"openshift-cluster-version\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n", "kubernetes.io/description": "Grant access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-05-13T16:44:59Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "resourceVersion": "508", "uid": "99cacc3c-9601-4ab8-b129-43afbbed9f85" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:14Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "974", "uid": "781d3fd3-6094-40fa-bf11-e8919eeaaaff" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kube-cloud-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1892", "uid": "61781aab-2b1c-4303-9424-8b57ff1d274f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1890", "uid": "2a048c3d-fd7f-461d-bc88-9943b4af32d1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "create", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1891", "uid": "22e8dcf5-8921-4079-9cf8-97491851740a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:29Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1786", "uid": "c0579fd5-ce60-48c1-95c7-7274983a6aa4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:12Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "912", "uid": "b06e0abf-c265-4c16-8ff8-be1ee23ba79a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "csr-controller-ca" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "openshift.io/description": "Can read the openshift-network-features ConfigMap values" }, "creationTimestamp": "2026-05-13T16:46:05Z", "name": "openshift-network-public-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "4292", "uid": "32cdb083-b7d1-4c0a-8969-8b2d80cba246" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-network-features" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:26Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "1642", "uid": "731f5089-2495-4015-a8f7-2c959969c317" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "oauth-serving-cert" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:27Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1679", "uid": "433009eb-3a96-443c-8fce-e7538f6c5f65" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:16Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1062", "uid": "166b50d5-fc9f-44e7-aa8b-c4b6134f06b5" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cloud-provider-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1895", "uid": "78d952c7-191d-485e-ab8d-9646efe40b97" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-05-13T16:45:27Z", "name": "coreos-pull-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1703", "uid": "ba424ebe-c666-424a-9410-f754d4ea3d82" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:07Z", "name": "dedicated-admins-project-request", "namespace": "openshift-config", "resourceVersion": "6237", "uid": "7ba19954-e778-49c1-ac6b-5cc14c95a3ad" }, "rules": [ { "apiGroups": [ "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:19Z", "name": "dedicated-admins-registry-cas-project", "namespace": "openshift-config", "resourceVersion": "5118", "uid": "9a192032-dbbf-4ad1-bcd0-2b25bc3fd829" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "registry-cas" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:24Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1371", "uid": "be5bfaad-ee8d-4a98-b3a1-281a2884e0f9" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:27Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1654", "uid": "1afdb253-4b1d-4174-b90b-a25bd23389b9" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pull-secret", "support" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1901", "uid": "490d40c2-e0a1-479c-a771-7cb40bdc15f5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "events" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update" ] }, { "apiGroups": [ "console.openshift.io" ], "resources": [ "consolenotifications" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "olmconfigs" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:42Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "2535", "uid": "81682058-fdca-427c-bfa7-e06682317ff4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1896", "uid": "86659369-2dfa-4b36-a812-ca2543baa661" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1888", "uid": "7330ef61-3443-4e56-b23f-1c7ffa153f9c" }, "rules": [ { "apiGroups": [ "console.openshift.io" ], "resources": [ "consoles" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services", "events", "configmaps", "secrets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes", "routes/custom-host" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:42Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "2536", "uid": "e62bf435-c53e-4da2-bb12-37ba5f55adeb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:05Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "636", "uid": "8ae4bd8c-9b3a-44ad-a152-bfd85e347269" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:09Z", "name": "dedicated-admins-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "4929", "uid": "72eb8da8-59b0-497f-9504-5f382738f2d8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "prometheuses", "prometheusrules", "servicemonitors", "podmonitors", "thanosrulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "alertmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "extensions", "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "pods", "replicationcontrollers", "replicationcontrollers/scale", "services" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "deployments", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests" ], "verbs": [ "*" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:09Z", "name": "prometheus-k8s-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "4928", "uid": "17c41f18-a9ba-4d06-b820-54f3953646f5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:57:27Z", "labels": { "olm.managed": "true" }, "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "uid": "0079b82e-c49a-4194-9a8d-84523b9ddefb" } ], "resourceVersion": "10444", "uid": "c24ea574-f3fe-4da0-86b9-75cee8bd0fe0" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:57:53Z", "labels": { "olm.managed": "true", "olm.owner": "deployment-validation-operator.v0.1.595-gbf89fe8", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-deployment-validation-operator", "olm.permissions.hash": "3vL2pKeIvLo5JPkyLuA3nWCfoliMwNiwwG0HQ7", "operators.coreos.com/deployment-validation-operator.openshift-deployment-validation": "" }, "name": "deployment-validation-op-7rLkLi3Nk0YvyK9xTCUeUEoOvQKqfsPU8GLVFH", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "1e35ef73-d91c-41a4-a36c-ed017ae2f040" } ], "resourceVersion": "10765", "uid": "2a3c9ea1-808b-4618-833c-5845cd93a525" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "services" ], "verbs": [ "get", "create", "list", "delete", "update", "watch", "patch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:57:52Z", "labels": { "olm.managed": "true" }, "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "3c0b3392-f50b-4bd5-a434-64065c46bbdb" } ], "resourceVersion": "10646", "uid": "98bcb3f7-1641-44c2-9207-8653fc941fcc" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "deployment-validation-operator.v0.1.595-gbf89fe8" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:15Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1036", "uid": "0fd70d78-5570-458d-9c6c-32dbc0b2d5c8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:12Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "885", "uid": "3efa0bbc-d823-4516-a56a-1b533f62d394" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:54Z", "name": "dedicated-admins-openshift-dns", "namespace": "openshift-dns", "resourceVersion": "5956", "uid": "9374b95c-7050-4a32-9a38-2a4c5d266b5e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:29Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "1802", "uid": "0ad5782e-8b19-495a-81fb-1c43522245ca" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:21Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "19140", "uid": "d455605d-3182-4e77-bd07-090243dfba40" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "28824", "uid": "3e6ad118-10af-4c37-8267-28d34a7ceae6" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "18883", "uid": "f5486154-cda6-4c47-b3f5-64d16f3c61d1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "18967", "uid": "6fb234fd-a27c-4bd4-86b3-3a984056d5e9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "18961", "uid": "1af20517-5a31-4953-bcb5-dda90f8ea558" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "18954", "uid": "4b12ecf5-27d5-4141-9531-446787028e4c" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:19Z", "name": "openshift-gitops-read", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "25cd5c48-c090-4dba-ada0-be7d0948aeab" } ], "resourceVersion": "18876", "uid": "5eaeb02a-6a82-43cb-b6ad-cd4ed951b300" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:25Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1424", "uid": "b8591bfc-1b47-4f2a-bb3d-640984c76fe9" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "replicasets", "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:27Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1693", "uid": "b2720d90-6c7a-4104-94e7-093256be53d4" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "privileged" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:09Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "797", "uid": "d4b79cca-9fb4-4cc2-a489-dd0a757433fe" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:23Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1320", "uid": "a11d8681-d159-4215-849a-0f387ac66e2f" }, "rules": [ { "apiGroups": [ "operator.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:41Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "2518", "uid": "2bf063c4-8ddb-4921-93fe-fdcaa1807deb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:36Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "2252", "uid": "c6abe1be-5a9e-4879-a02b-8ec55fa59b5d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:27Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1705", "uid": "bf431e36-7633-442d-86ec-a92cb36dc073" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "gather" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "delete", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:28Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1756", "uid": "0923a9d9-9acb-4f64-b301-20afe616ec53" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:32Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1940", "uid": "5c3e3e9e-0fe5-435d-8fc7-9903299b5add" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:41Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "2519", "uid": "6b706753-0345-4141-8039-a4fc33e4d7c6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:04Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "565", "uid": "dc4fc67e-178a-47b6-b93b-f48269a6e32a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:25Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1518", "uid": "6b5b0db4-f82f-4d9c-8541-d033d3090967" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:07Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "741", "uid": "486596f5-6b2f-4dab-9254-0d6d9d177d0c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:19Z", "name": "dedicated-admins-openshift-logging", "namespace": "openshift-logging", "resourceVersion": "5150", "uid": "cd40ae01-60fb-40ae-80c5-3e325993e370" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "events", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "logging.openshift.io" ], "resources": [ "clusterloggings" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "persistentvolumeclaims" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:15Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1057", "uid": "db9517dd-ac37-4078-a295-a2cf76b6171b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-autoscaler-status" ], "resources": [ "configmaps" ], "verbs": [ "delete", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:06Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "672", "uid": "aba6f994-91db-45fb-adcc-acaebe8beaec" }, "rules": [ { "apiGroups": [ "autoscaling.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "cluster.k8s.io", "machine.openshift.io" ], "resources": [ "machinedeployments", "machinesets" ], "verbs": [ "watch", "list", "get", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors", "prometheusrules" ], "verbs": [ "watch", "list", "get", "create", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:19Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1190", "uid": "ea838b53-628f-4c8a-93e2-895be6b3e64e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:21Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1216", "uid": "5f69cf9a-67cd-4354-b58d-1e82d7628f45" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:40Z", "labels": { "olm.managed": "true" }, "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "uid": "1a6a2934-4b19-44cb-beb7-d27e997bbb46" } ], "resourceVersion": "17447", "uid": "3ef22ffe-6f72-47e0-a38a-3a66e62ca1c9" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:41Z", "labels": { "olm.managed": "true" }, "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "uid": "5d69faae-153c-4bd4-99ca-e405aa524335" } ], "resourceVersion": "17460", "uid": "f970131b-127b-4b0b-895d-47a461641212" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:37Z", "labels": { "olm.managed": "true" }, "name": "5aa5e4cbc2f6ac9107b7dd5bfb7c8725ca307e639be07100d6806658fe72f6a", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "5aa5e4cbc2f6ac9107b7dd5bfb7c8725ca307e639be07100d6806658fe72f6a", "uid": "bfa15dd7-1b82-4736-be91-c5ad4ade3ff1" } ], "resourceVersion": "17327", "uid": "47adaaf0-2999-496b-b18c-87b4413f6fe2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "5aa5e4cbc2f6ac9107b7dd5bfb7c8725ca307e639be07100d6806658fe72f6a" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:40Z", "labels": { "olm.managed": "true" }, "name": "6cf865aa5c15082e065f268dbaa3ff319c528f04756bcf44f2bc66f448c35d9", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "6cf865aa5c15082e065f268dbaa3ff319c528f04756bcf44f2bc66f448c35d9", "uid": "1d3c72e1-d2b2-4a14-afce-f059e96f45e0" } ], "resourceVersion": "17434", "uid": "890f4d2a-12d8-4130-a5c3-965e0ceb909b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "6cf865aa5c15082e065f268dbaa3ff319c528f04756bcf44f2bc66f448c35d9" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:37Z", "labels": { "olm.managed": "true" }, "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "uid": "a24ea483-a5ab-4a51-9ecd-6012c2ed8ccb" } ], "resourceVersion": "17333", "uid": "e8ed5129-bc5c-4014-b05d-075aa2b45d9a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:54Z", "name": "dedicated-admins-openshift-marketplace", "namespace": "openshift-marketplace", "resourceVersion": "5949", "uid": "c1ac5cf2-6c45-4a46-8029-ac4c914125e5" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "catalogsources" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:40Z", "labels": { "olm.managed": "true" }, "name": "ffb141fe6a893934ae2bd5dece966211da4589ce7d3b723e9d299c9f584c778", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ffb141fe6a893934ae2bd5dece966211da4589ce7d3b723e9d299c9f584c778", "uid": "1883abe3-9fd5-4fb9-a211-cdf1d7219826" } ], "resourceVersion": "17426", "uid": "b1c7c052-7dbe-49d3-9626-46433d262b54" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "ffb141fe6a893934ae2bd5dece966211da4589ce7d3b723e9d299c9f584c778" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:13Z", "name": "backplane-cee", "namespace": "openshift-monitoring", "resourceVersion": "6506", "uid": "566ca879-2e62-49cd-9374-78296d05ef11" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:09Z", "name": "backplane-lpsre", "namespace": "openshift-monitoring", "resourceVersion": "4845", "uid": "b2241fa2-1ba3-4d24-b2d6-3b203814f6fc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:12Z", "name": "backplane-mcs-tier-two", "namespace": "openshift-monitoring", "resourceVersion": "6459", "uid": "0582e5d6-ba2e-458f-832b-888c6833221b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:47Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-metrics-api", "namespace": "openshift-monitoring", "resourceVersion": "12828", "uid": "2c1ae1de-1032-4cb0-8527-1ffb15fe734b" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "k8s" ], "resources": [ "prometheuses/api" ], "verbs": [ "get", "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:21Z", "labels": { "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1244", "uid": "dcf1992f-8115-405a-9088-63dd86f3b484" }, "rules": [ { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules", "alertrelabelconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules/finalizers", "alertingrules/status" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:30Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1899", "uid": "c9aed263-4dae-4bbe-a375-3b074cd504aa" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:08Z", "name": "dedicated-admins-hostedcluster-uwm", "namespace": "openshift-monitoring", "resourceVersion": "6282", "uid": "a554820c-d997-4175-b93f-422eb5a5e3c5" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmap" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "configmap" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:46Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-edit", "namespace": "openshift-monitoring", "resourceVersion": "12790", "uid": "93d5fce1-bb89-444f-9249-3858b21e6ad8" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:47Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-view", "namespace": "openshift-monitoring", "resourceVersion": "12809", "uid": "830029fe-c08c-4519-91c9-b25b7429fd15" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:48Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "12986", "uid": "bfcafea9-d905-437a-95d9-39dc5cda3240" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:48Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "12939", "uid": "dd6e87c5-5108-4b1c-ac33-c101ead89f0a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:10:46Z", "labels": { "app.kubernetes.io/component": "segment-backup-installation", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/instance-namespace": "tssc-tas", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "segment-backup-nightly-metrics", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rhtas-segment-backup-job-tssc-tas", "namespace": "openshift-monitoring", "resourceVersion": "24282", "uid": "83fbb623-ca0b-4b81-be26-e70d1d2ff98e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:53Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "2745", "uid": "583996f7-fc51-43f9-b50f-b7b4b3776ba2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:50Z", "name": "whereabouts-cni", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "2706", "uid": "cde6de7e-3c2f-4588-9526-7bbd9360012e" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:13Z", "name": "backplane-cee-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6512", "uid": "31e55784-7bdc-436c-8db8-30366e5aabfe" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:40Z", "name": "backplane-csm-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "5646", "uid": "114fd1d2-8107-4a30-96d3-ea279167fa32" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:45Z", "name": "backplane-lpsre-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6853", "uid": "08f40150-3466-4656-a1c2-ecc630b02500" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "list", "get" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "list", "get", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:12Z", "name": "backplane-mcs-tier-two-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6462", "uid": "bd70e616-6ed5-408e-a109-6ea13952c086" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:44Z", "name": "backplane-mobb-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6845", "uid": "bc4eb1c6-e350-4dc1-9786-9e051f498221" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:30Z", "name": "backplane-srep-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "5416", "uid": "f7236699-fc21-4b5f-afa8-1042d5e7f7d7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:48:11Z", "name": "backplane-tam-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6420", "uid": "b91be039-2140-4ac9-911e-86dbc198402a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:46:02Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "4054", "uid": "2e6d198e-fe27-491f-9a00-a5f3d909da90" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:46:04Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "4262", "uid": "bfaf7be2-65e9-415b-9792-01d7e68aecfb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:46:06Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "4344", "uid": "ace105b6-be50-4879-a303-875b8072d160" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:22Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1287", "uid": "6c647f11-9509-4a40-9682-c5b6a37d01b6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:26Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "461", "uid": "df33f675-6dce-455e-badc-4a5cc56e31fe" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:54Z", "name": "dedicated-admins-openshift-operators", "namespace": "openshift-operators", "resourceVersion": "5945", "uid": "0df20941-b367-46f6-ba22-d02006929dda" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans", "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:11Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.20.3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-7dZc96pdcBCF2yHlvLNpxsecf0Tq8kgH84Jkxl", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.3", "uid": "05f77966-6958-4c8c-9b04-387a2d3628dd" } ], "resourceVersion": "22012", "uid": "1b0ce83f-469c-4e78-bb35-f25a5a4d305d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:13Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.3", "uid": "05f77966-6958-4c8c-9b04-387a2d3628dd" } ], "resourceVersion": "21842", "uid": "70b7ccf8-bc6d-4acd-adf7-3bd6be13b2cf" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-gitops-operator-controller-manager-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:05Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "18198", "uid": "be5a9676-5793-45f3-9769-1d1af9a7eb31" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:03Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.20.3", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.20.3", "uid": "83bb0bd0-5c31-4323-8edc-a765df9ec610" } ], "resourceVersion": "18100", "uid": "c63405c1-611f-41a7-a35d-52a8a53ae326" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-gitops-operator.v1.20.3" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:12Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-read", "namespace": "openshift-operators", "resourceVersion": "18400", "uid": "06153bd1-ef97-4454-8e97-b6d223f633b0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:12Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v1.21.1", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v1.21.1", "uid": "62f8eda4-b945-40f0-a5d6-d6a7ab251e50" } ], "resourceVersion": "18409", "uid": "399f0702-2c5e-4cb5-8a8b-38518c55e785" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-pipelines-operator-rh.v1.21.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:17Z", "labels": { "olm.managed": "true" }, "name": "rhdh-operator.v1.9.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhdh-operator.v1.9.4", "uid": "0c5b3a02-369c-4f23-b37f-89dddaefe89a" } ], "resourceVersion": "18725", "uid": "9dd6c627-6118-475c-a765-e349666ce3c7" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhdh-operator.v1.9.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:20Z", "labels": { "olm.managed": "true", "olm.owner": "rhdh-operator.v1.9.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhdh.openshift-operators": "" }, "name": "rhdh-operator.v1.9.4-rhd-aLDt04vakp3HDjfCw7K9S3Ven0p91ezU2S9VEh", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhdh-operator.v1.9.4", "uid": "fde8a675-b192-4a2b-8a32-3939be041a1b" } ], "resourceVersion": "22441", "uid": "ec55650c-470d-4a64-b7c6-176e0e0c775d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:22Z", "labels": { "olm.managed": "true" }, "name": "rhtas-operator.v1.3.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtas-operator.v1.3.4", "uid": "ec00aaf9-2e90-469e-8a9a-9d695ae988e6" } ], "resourceVersion": "19235", "uid": "700f494e-2102-4874-95f1-9aba927d168a" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtas-operator.v1.3.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:25Z", "labels": { "olm.managed": "true", "olm.owner": "rhtas-operator.v1.3.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhtas-operator.openshift-operators": "" }, "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtas-operator.v1.3.4", "uid": "f12b95df-a475-44ee-b3d5-4ea08f86efe6" } ], "resourceVersion": "22618", "uid": "f23f1ab3-2e09-4378-98d0-d0cad0e69b6a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:16Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "18683", "uid": "12697e7d-6723-465a-8823-15ec80bf29dc" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-operator-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:58Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "3582", "uid": "10a64e9c-d39c-4cdd-acc1-f081daa95f08" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "create", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:56Z", "name": "openshift-ovn-kubernetes-node-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "2990", "uid": "e3c7eb59-8d2c-4878-8e3d-6e0d53046654" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:46:00Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "0cf5c59b-8afa-4886-9966-39fee4f5c6fd" } ], "resourceVersion": "3959", "uid": "087e5d38-f1e4-486f-9f49-b06705cd8c57" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "7690b08d94e0b3a8881d06603bf3450e36239096ec8da79e68ddd158d031b103" }, "creationTimestamp": "2026-05-13T17:12:07Z", "name": "openshift-pipelines-read", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-post-mvvzd", "uid": "4d0a880e-a82c-474f-9f5e-897ba0de0d14" } ], "resourceVersion": "26220", "uid": "9fa16004-acca-4edf-9868-7b6795b22b08" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "b32355831eb5d84b6eea21c31593f9856ee3b9a5faa6d2b19cd6ce438047fe10" }, "creationTimestamp": "2026-05-13T17:13:28Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-ztkfk", "uid": "55232ae8-08ed-4ca1-a22a-13938f6dcc58" } ], "resourceVersion": "28823", "uid": "0882fded-661b-47a8-933d-5565863f01cd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "f12ab3b51e6cfbbeafee5aecc4d4d546ab5c13549cb8a181891fc1aba410ede0" }, "creationTimestamp": "2026-05-13T17:13:28Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-ztkfk", "uid": "55232ae8-08ed-4ca1-a22a-13938f6dcc58" } ], "resourceVersion": "28817", "uid": "e1aa5a3c-b178-4adb-83ee-8ac4a6c2524e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4e8ad418b043a06390c99dad22ecb8038f43a1c3055fedc451a11bf4999f846f" }, "creationTimestamp": "2026-05-13T17:13:29Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-monitoring", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-ztkfk", "uid": "55232ae8-08ed-4ca1-a22a-13938f6dcc58" } ], "resourceVersion": "28865", "uid": "4b14e00b-be6e-4b3a-a5e0-046daac9049e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "65e13884a9a08670c9062124111fc7d2197dba0eecdfae62690d42f23b65b821" }, "creationTimestamp": "2026-05-13T17:13:28Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-ztkfk", "uid": "55232ae8-08ed-4ca1-a22a-13938f6dcc58" } ], "resourceVersion": "28834", "uid": "0458b9bd-ca5d-4f88-8404-ee6c41862164" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "251f26ff968d1cc57d3d1a91d577a767a05c884888a65abf90069e37d85a924a" }, "creationTimestamp": "2026-05-13T17:13:28Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-ztkfk", "uid": "55232ae8-08ed-4ca1-a22a-13938f6dcc58" } ], "resourceVersion": "28846", "uid": "ea67dbb5-2df4-4c41-8e9e-e7f36f515ba1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "82c73504703f65f243d955e23086a6771061e6b6ab5c75b72ca5b9ee6e0d8834" }, "creationTimestamp": "2026-05-13T17:12:30Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-kdxgl", "uid": "9dea8e78-eedf-4638-93dc-ef67ab058849" } ], "resourceVersion": "26880", "uid": "4cd5c9a9-a2b2-4bde-a768-bc5a429538de" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "chains-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "c4c188373e53e24c56d7513e088ea92e7baf7a9b9b7a5afd557ad0ccfc938875" }, "creationTimestamp": "2026-05-13T17:12:30Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-kdxgl", "uid": "9dea8e78-eedf-4638-93dc-ef67ab058849" } ], "resourceVersion": "26876", "uid": "b159ccdf-f011-4f81-9d1e-a3aea8a6f7f2" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "119b62cf8e6f6ccd32da214371ab30a6100d9738af50b74fa76ad5a3d8e52abd" }, "creationTimestamp": "2026-05-13T17:13:02Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-default-openshift-pipelines-view", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-9z888", "uid": "b41cc435-c699-48ce-b976-1184f0ee1e31" } ], "resourceVersion": "28124", "uid": "a0d618a4-0683-4a7a-bba1-bb518c8c9276" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"2005e28a7a6250441fccc67c2e18322a27bb298bf37624a404efb0c1f1c0d62b\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-stepaction-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolverstepactions-1.21-zht64\",\"uid\":\"ad11602b-e36f-4969-a3bd-c8d5acb4b6a2\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"stepactions\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "2005e28a7a6250441fccc67c2e18322a27bb298bf37624a404efb0c1f1c0d62b" }, "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-stepaction-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolverstepactions-1.21-zht64", "uid": "ad11602b-e36f-4969-a3bd-c8d5acb4b6a2" } ], "resourceVersion": "28355", "uid": "2bce1348-b04a-43f9-a97e-3f475d22bfef" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "stepactions" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"c4f87b4a05892a732d96ff524735fddb0ba69db0a9ec5313ba2d2d27ee21720f\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-task-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolvertasks-1.21-mhb8l\",\"uid\":\"2bf52035-ac1d-4209-89c6-3ab3bb384bad\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"tasks\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "c4f87b4a05892a732d96ff524735fddb0ba69db0a9ec5313ba2d2d27ee21720f" }, "creationTimestamp": "2026-05-13T17:13:00Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-task-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolvertasks-1.21-mhb8l", "uid": "2bf52035-ac1d-4209-89c6-3ab3bb384bad" } ], "resourceVersion": "28322", "uid": "2fca15e9-17e3-44b4-a5bc-b285305ea57e" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "e4cdcbe572f76d0e30395c18fbe3e989d6cbadda636d836704a000fab972b68e" }, "creationTimestamp": "2026-05-13T17:11:45Z", "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-operators-proxy-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25569", "uid": "122d583a-d2ff-4dcd-b8a7-9547582901ff" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8c9fdcb38d786530a64ed67e1ff40c0112aab550ffaed357d0a96e5ab8dea2f8" }, "creationTimestamp": "2026-05-13T17:11:42Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25466", "uid": "deb229dd-19a4-49c6-979b-5fd1a2bf297c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-controller", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "0509a10b05630c0e0238524d1d4c61d95d016e8bee9195cc5d8a0b2d3baa1dba" }, "creationTimestamp": "2026-05-13T17:11:42Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25471", "uid": "2fafd400-4893-4f0f-ac1b-26a74532949b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-events", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "003f40316eeebf481e389437654dcfedad8027f8acb77776de7bb11716e74943" }, "creationTimestamp": "2026-05-13T17:11:42Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25474", "uid": "e3bb1994-19d7-43f6-9988-7c9b1ee0ddcf" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4f7b4d536c24fe318480e6446e9840a8dd0e71507aee53b6c08c4aa44679d64a" }, "creationTimestamp": "2026-05-13T17:11:42Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25473", "uid": "d042c8bc-7636-4466-b38d-7e244aa0229b" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "e9df637e3e0948fa3723219d225f3a82744074edfe76c62b822fdc1a4fc4baaa" }, "creationTimestamp": "2026-05-13T17:11:44Z", "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-resolvers-namespace-rbac", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25521", "uid": "7d68bdec-10d7-4c3d-824f-fb479469374a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "14d05f8bb86d737a8c09ee83d8cc30ff33b5264d2257cbdd191ebf16881ca4bb" }, "creationTimestamp": "2026-05-13T17:11:42Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-vw2h7", "uid": "77e2bb3c-0612-47da-8a31-97525f3a2f85" } ], "resourceVersion": "25469", "uid": "4d551774-9b45-4c0c-a6cf-9953d1582e69" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "config-leader-election-webhook", "feature-flags" ], "resources": [ "configmaps" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "1b0fedcb979a843e19023152aa3bfeba4a3127e5b02620163850b4916effecfd" }, "creationTimestamp": "2026-05-13T17:12:36Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-fckn7", "uid": "4740c213-aa0e-4e68-911c-cd0f098793b1" } ], "resourceVersion": "27162", "uid": "0e6e1805-8dbe-4d1e-8117-7cee5467b300" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-results-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8370b37b1d086757ce3493870824e34d30ab6b62721d49432caa2595bcb3a71b" }, "creationTimestamp": "2026-05-13T17:12:09Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-admin-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-rvvhm", "uid": "8b95b549-8c4c-4c9b-91d2-2ff4c70456a7" } ], "resourceVersion": "26330", "uid": "508af98d-b32f-4765-91c0-9babbc3d72db" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "972efae0e37583081c74dc1f7fc642be39f44c4fbb62bf781e8a2a57f1dd6422" }, "creationTimestamp": "2026-05-13T17:12:09Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-rvvhm", "uid": "8b95b549-8c4c-4c9b-91d2-2ff4c70456a7" } ], "resourceVersion": "26336", "uid": "bca63b4c-0177-4b0c-86e1-5a2492bad5af" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "ccfcdf4abfa7cb07b20e1cc6e07d36a4e0763fa81d19ac2513d15fae4ee4d443" }, "creationTimestamp": "2026-05-13T17:12:09Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-rvvhm", "uid": "8b95b549-8c4c-4c9b-91d2-2ff4c70456a7" } ], "resourceVersion": "26342", "uid": "cdcfb51b-7eb3-43b3-9720-040ff5843781" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "triggers-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:45:25Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "openshift-route-controllers", "namespace": "openshift-route-controller-manager", "resourceVersion": "1519", "uid": "1e837eb4-4834-4d6a-be14-4a231fbd72cf" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "openshift-route-controllers" ], "resources": [ "leases" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-13T16:45:12Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "880", "uid": "90dba09a-3f1c-4938-a21a-33314cfced06" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:05Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "11378", "uid": "3fdf2612-8b70-4070-baa6-35d139c895a9" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets", "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:20Z", "name": "dedicated-admins-user-workload-monitoring-create-cm", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5171", "uid": "0c475c96-655a-4995-8b8a-b07bb882e4b5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:47:21Z", "name": "dedicated-admins-user-workload-monitoring-manage-am-secret", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5177", "uid": "094ee742-8845-4030-a79a-15c91a7bc2c3" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "alertmanager-user-workload" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:46Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-reader", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12760", "uid": "70fd1214-5e54-41cf-94c2-ac12780f598a" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:46Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-writer", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12773", "uid": "c410ebd4-3bc2-4448-bddc-bedcedf02957" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:48Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12997", "uid": "a92f41d3-46c4-4337-bfd2-fc99fd143418" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T16:59:46Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "user-workload-monitoring-config-edit", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12752", "uid": "8aa16b09-f7e0-4349-99cc-e59c8d35096d" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "user-workload-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:45:26Z", "name": "copied-csv-viewer", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "fbe66d3c-fd64-4cf2-a718-a094ada5a563" } ], "resourceVersion": "1619", "uid": "f2fbce17-bd28-40b8-bda8-4459e039bb29" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8b5c66d2d58a382cc040d0064df43232c9cb9a94d7fea90734edbc8ab9ccda18" }, "creationTimestamp": "2026-05-13T17:13:46Z", "labels": { "app.kubernetes.io/part-of": "pipelines-as-code" }, "name": "pipelines-as-code-templates", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-post-r4l58", "uid": "f3c6f81f-eb1a-48d1-bc55-0f6c60d083d0" } ], "resourceVersion": "29215", "uid": "b40a4b60-7fd7-4127-a2dc-65e5d959a23c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-go-template", "pipelines-as-code-java-template", "pipelines-as-code-nodejs-template", "pipelines-as-code-python-template" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-05-13T16:44:26Z", "name": "shared-resource-viewer", "namespace": "openshift", "resourceVersion": "455", "uid": "6e7ca85b-f6cd-497e-aaee-2c18c78ba670" }, "rules": [ { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:48Z", "labels": { "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "rhbk-operator", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp", "operators.coreos.com/rhbk-operator.rhbk-operator": "" }, "name": "rhbk-operator.v26.4.11-o-2Y3j2KREFP6RVeNbSx2TtLR9lDUD6wYpYdIxdv", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.2", "uid": "9a173efc-b610-40ba-885b-62cbbc6598c2" } ], "resourceVersion": "17880", "uid": "ccdd5536-5d85-4ea7-8c8c-6e7b35fb3f8d" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:47Z", "labels": { "olm.managed": "true" }, "name": "rhbk-operator.v26.4.11-opr.2", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhbk-operator.v26.4.11-opr.2", "uid": "6bba34b3-ea92-4c6e-82f6-55635b18001c" } ], "resourceVersion": "17623", "uid": "f385d862-b2cc-47c8-8e70-bdc76e069d28" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhbk-operator.v26.4.11-opr.2" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-ci", "resourceVersion": "28838", "uid": "031201e3-3b9f-4e0c-818b-36574893631f" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-ci", "resourceVersion": "28041", "uid": "2e86e611-daec-4529-a929-0c2a15eb31b1" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-development", "resourceVersion": "28842", "uid": "540fec9d-43ee-4a8f-bac0-970b6510af36" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-development", "resourceVersion": "28046", "uid": "8b6a9669-944b-4b84-858f-e22c757ec3d0" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-prod", "resourceVersion": "28845", "uid": "dc8aa4b8-7240-4f8d-90f1-35c587811a34" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-prod", "resourceVersion": "27917", "uid": "5725762c-634e-4b6d-a3fe-6fe93756f6c8" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-stage", "resourceVersion": "28837", "uid": "8afe12b1-c4f2-4d3a-a6ee-457df2a82f7f" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:13:01Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-stage", "resourceVersion": "28040", "uid": "00705127-6f30-4d2b-8020-98aae2006910" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:42Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20899", "uid": "f2c3b91e-9e5e-45ff-9e1a-602e577f2096" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "28847", "uid": "626391b0-758a-4739-8c3f-2f000cc02ac6" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20715", "uid": "562a6d52-b3b4-4cad-baa3-50bd07b6c176" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20746", "uid": "2de2f6de-703f-4f20-8a0a-167db1521adc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20743", "uid": "adb3bd87-11d7-4a5b-baee-b2687e934973" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20740", "uid": "e6bee614-4a26-4b96-a67a-2d10af872244" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:07:41Z", "name": "tssc-gitops-read", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "90087fa3-cf09-462e-a9f7-a4040716898d" } ], "resourceVersion": "20690", "uid": "4387682e-853a-4d37-88a8-dcbbbf297521" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:48Z", "labels": { "olm.copiedFrom": "rhbk-operator", "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-keycloak", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp" }, "name": "rhbk-operator.v26.4.11-o-2Y3j2KREFP6RVeNbSx2TtLR9lDUD6wYpYdIxdv", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.2", "uid": "800fdf01-1a87-4aed-9411-571b2fcf2984" } ], "resourceVersion": "17690", "uid": "35d3df86-d277-4c91-a7a3-1f6faf099c36" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:10:47Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "ctlog-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "CTlog", "name": "trusted-artifact-signer", "uid": "93dd05cd-2afc-48f2-b885-ca6fd576b16d" } ], "resourceVersion": "24406", "uid": "ad9bd179-3ea9-437f-983c-ce3ada64d336" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:10:47Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rekor-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Rekor", "name": "trusted-artifact-signer", "uid": "6d7df774-461a-4f6e-bb67-df040e601f47" } ], "resourceVersion": "24483", "uid": "c7f983de-0a0f-41cc-8591-b56e5a7934d7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:10:47Z", "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "trillian-logsigner", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Trillian", "name": "trusted-artifact-signer", "uid": "2ea3d72b-500e-4072-a1a5-d99eb90093a6" } ], "resourceVersion": "24339", "uid": "b5ad4fff-9183-4d56-9b40-d5cd31aa58b5" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "update", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:12:12Z", "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf-repository-init", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "tuf-repository-init", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuf", "name": "trusted-artifact-signer", "uid": "4da02be3-b4c4-4eb8-9951-2ea9145c66a4" } ], "resourceVersion": "26447", "uid": "d3eb8373-1a6e-4b2e-8de2-80744312832a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:54Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator.v1.1.4", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtpa-operator.v1.1.4", "uid": "daa07cf0-8edb-4e20-9983-69b91d590650" } ], "resourceVersion": "17842", "uid": "cfb50beb-c37e-4842-92f0-bc7c3c18672a" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtpa-operator.v1.1.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-05-13T17:06:57Z", "labels": { "olm.managed": "true", "olm.owner": "rhtpa-operator.v1.1.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-tpa", "olm.permissions.hash": "89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM", "operators.coreos.com/rhtpa-operator.tssc-tpa": "" }, "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtpa-operator.v1.1.4", "uid": "247b5968-cc72-44ce-81ee-2da4056ce9ff" } ], "resourceVersion": "18300", "uid": "5f4b4660-4655-452c-8fc0-41dc0a7e4bf4" }, "rules": [ { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }