{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:51Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "13691", "uid": "6fb68b41-e2c0-433c-ac16-a0214cb25137" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "263", "uid": "0522033b-e36f-4881-a623-f8f0b27879ed" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-info" ], "resources": [ "configmaps" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "257", "uid": "87f781f7-90af-4815-885b-bf7484fb1c07" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "extension-apiserver-authentication" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:51Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "13703", "uid": "4dadd4ed-dc13-4e5d-b53f-a3f6050420f2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "261", "uid": "c6b86438-1286-48d2-a84a-40d44185cd28" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-controller-manager" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "262", "uid": "004a9c79-55dd-436d-add1-4da0b762e353" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-scheduler" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "258", "uid": "b2a7ed8d-b687-4ef8-9b45-9d8164dd1cb0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "259", "uid": "67b58808-3ece-4e8c-8e57-536ab416ad5b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:17Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "260", "uid": "643848f4-a97a-4750-8b7b-f508f893b5c2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "watch" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:14Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:leader-election-lock-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "1532", "uid": "afc27469-169c-4d16-a081-34e23d1bb576" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "618", "uid": "ea706b34-2e8e-4fc2-a7bf-60f1aac89c69" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:14Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1673", "uid": "6781e57a-78ba-41fd-83ce-a29c98124ee5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "634", "uid": "0533ec96-20b5-4eb3-8b02-c4fce0b5c7e1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:32Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "3565", "uid": "294cbaf7-a9de-46f3-a862-93932c579fc8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:56Z", "name": "backplane-cee-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6753", "uid": "4b00c78a-e5fe-462e-888c-d44c9b384381" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:20Z", "name": "backplane-csm-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6026", "uid": "6c531a37-4ea7-42f7-b2e5-645a8ef1c14a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:19Z", "name": "backplane-mcs-tier-two-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5970", "uid": "25f6307a-f975-4919-85dc-4e03300d161f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:53Z", "name": "backplane-mobb-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6722", "uid": "6920e027-87d0-48e2-a59f-26e0d6820011" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:20Z", "name": "backplane-srep-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6031", "uid": "a84b0bd5-24aa-4d1d-aee9-4a766d1cc00f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:56Z", "name": "backplane-tam-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6760", "uid": "eeccfbe7-5cc1-4eee-b2ff-cb8da96d3c2e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:17Z", "name": "osd-delete-backplane-script-resources", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5880", "uid": "2c8134cc-e26f-4894-b1de-53adeff7029d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "serviceaccounts" ], "verbs": [ "get", "list", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:47:06Z", "name": "cloud-credential-operator-role", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1070", "uid": "a36ff5d5-06a0-4222-b799-148ffdd7fb8c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "events", "serviceaccounts", "services", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "*" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "629", "uid": "1f88b87b-fd11-4e69-871c-13138075d893" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:35Z", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3622", "uid": "a5a187de-f3c8-4889-8818-8003520da196" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:22Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "2970", "uid": "f64f7165-3070-45db-94b0-4ff6e5b3d8da" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:12Z", "name": "aws-ebs-csi-driver-operator-role", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1397", "uid": "54864957-15b6-4667-8c3d-b96f08c3beb5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps", "secrets", "persistentvolumeclaims" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "watch", "list", "get", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "get", "create", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:57Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "798", "uid": "cdfa1e43-6c05-44e6-8a4a-c964ffe55d91" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:56Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "737", "uid": "916d45dd-b078-4296-9dca-b14ec8e5b614" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:03Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "972", "uid": "8eb34792-415c-45de-bc56-19e80e5a4fc3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:47:13Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1474", "uid": "d3af0068-a53f-4f1b-8cce-0fe9e845965e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T16:03:21Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "15096", "uid": "aa69ab2d-0bcc-4612-95c9-128c52f0790e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:06Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1081", "uid": "aabb38c3-b3a7-494f-9af4-6b8e19a604b8" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:09Z", "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1246", "uid": "21808bac-d9ac-456e-8221-b5d6ef424a02" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts", "services", "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "627", "uid": "6410d70f-4d5e-4bd8-8d91-76a839635f6a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"include.release.openshift.io/self-managed-high-availability\":\"true\",\"kubernetes.io/description\":\"Grant access to monitor the cluster-version operator's metrics.\"},\"name\":\"prometheus-k8s\",\"namespace\":\"openshift-cluster-version\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n", "kubernetes.io/description": "Grant access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-04-27T15:46:43Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "resourceVersion": "499", "uid": "4fa93810-6943-4693-ba55-516dabaafd8e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:47:02Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "942", "uid": "ae9b829c-df73-4eb3-be57-094f879d0f1e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kube-cloud-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2605", "uid": "89d3b84f-b1de-4319-b6dc-7bc86d07a2d6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2593", "uid": "fce8b2dd-c851-4fb6-ab03-fcc996edf169" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "create", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2596", "uid": "50a7a362-3ca9-4a12-89f7-9591922d25a8" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:16Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2407", "uid": "6c0139d7-83a0-4e89-8d8c-189a7f44a9b2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:00Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "903", "uid": "175cbb1e-b872-48c5-88c8-3e7e5fd6839b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "csr-controller-ca" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "openshift.io/description": "Can read the openshift-network-features ConfigMap values" }, "creationTimestamp": "2026-04-27T15:47:53Z", "name": "openshift-network-public-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3967", "uid": "06536b78-24e2-45d2-801c-2f83ea278986" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-network-features" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:14Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "1679", "uid": "ebf97340-7e1c-48ee-8301-84e84a47b64f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "oauth-serving-cert" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:14Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1662", "uid": "e7a1b3fa-23f9-48f4-bc5c-f7831922663b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:47:04Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1007", "uid": "ef0d547f-e58c-42b3-a2e7-8722332b30a7" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cloud-provider-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2611", "uid": "55591168-eae4-483e-af49-5153dcb98875" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:47:16Z", "name": "coreos-pull-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2237", "uid": "2c569bbf-9494-489f-acb2-88475dae6733" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:49:56Z", "name": "dedicated-admins-project-request", "namespace": "openshift-config", "resourceVersion": "5391", "uid": "7c569273-92cf-429b-a647-70c184261016" }, "rules": [ { "apiGroups": [ "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:49:54Z", "name": "dedicated-admins-registry-cas-project", "namespace": "openshift-config", "resourceVersion": "5313", "uid": "a5d3a005-a004-4166-86c9-7ed973472825" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "registry-cas" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:13Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1463", "uid": "9fd22ae0-5d17-4c36-a84e-39b7ce64f9d8" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:14Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1651", "uid": "f7e1e867-49b5-451b-840f-531ba02d6c05" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pull-secret", "support" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2637", "uid": "de618b5d-a4ff-4906-86f0-15a7f9969036" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "events" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update" ] }, { "apiGroups": [ "console.openshift.io" ], "resources": [ "consolenotifications" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "olmconfigs" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:31Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "3464", "uid": "2fbfb7aa-8102-40e3-a93f-c971371e2b89" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2621", "uid": "aa770e75-8ceb-4f0c-a850-7232a030ff15" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2588", "uid": "88c0eb0b-c465-4b8b-92b4-504447e7ce9e" }, "rules": [ { "apiGroups": [ "console.openshift.io" ], "resources": [ "consoles" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services", "events", "configmaps", "secrets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes", "routes/custom-host" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:32Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "3489", "uid": "f22a3391-9efe-4de1-8a1c-3ab7b56d484a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "626", "uid": "d49afb93-3d6f-4132-ab1e-563f6e9e15d3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:43Z", "name": "dedicated-admins-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "6524", "uid": "afd59c18-c906-4ad1-ac02-5bfd8b2f49ad" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "prometheuses", "prometheusrules", "servicemonitors", "podmonitors", "thanosrulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "alertmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "extensions", "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "pods", "replicationcontrollers", "replicationcontrollers/scale", "services" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "deployments", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests" ], "verbs": [ "*" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:42Z", "name": "prometheus-k8s-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "6522", "uid": "cfecd309-f4d8-4d5f-aaeb-449d90d4173d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:24Z", "labels": { "olm.managed": "true" }, "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "uid": "81f24075-a2ef-48b4-9e98-a74cf57cca2e" } ], "resourceVersion": "10459", "uid": "e644808f-fbf1-4de6-a1af-f1341195909f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:50Z", "labels": { "olm.managed": "true", "olm.owner": "deployment-validation-operator.v0.1.595-gbf89fe8", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-deployment-validation-operator", "olm.permissions.hash": "3vL2pKeIvLo5JPkyLuA3nWCfoliMwNiwwG0HQ7", "operators.coreos.com/deployment-validation-operator.openshift-deployment-validation": "" }, "name": "deployment-validation-op-7rLkLi3Nk0YvyK9xTCUeUEoOvQKqfsPU8GLVFH", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "05c6f7bd-af98-40c1-acef-b6e85897450a" } ], "resourceVersion": "10729", "uid": "24204f9e-4fc2-4f6d-8789-8bb797f87d64" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "services" ], "verbs": [ "get", "create", "list", "delete", "update", "watch", "patch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:49Z", "labels": { "olm.managed": "true" }, "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "1e18de81-95f3-4683-bcea-406daf8821c7" } ], "resourceVersion": "10620", "uid": "e63047f4-2975-4d8d-a620-2b0c2cb4e7aa" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "deployment-validation-operator.v0.1.595-gbf89fe8" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:03Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "970", "uid": "0b1993fd-cdff-4a3d-bf7d-a060998c4af2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:00Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "900", "uid": "5faf0207-14fb-45f2-9172-5809aa89ea24" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:46Z", "name": "dedicated-admins-openshift-dns", "namespace": "openshift-dns", "resourceVersion": "6635", "uid": "77071504-b98c-4181-a187-35a762a0f940" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:17Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "2516", "uid": "3329b499-5b2a-4e2c-ad83-413f868aea70" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:51Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21824", "uid": "2e8460d1-942a-45a4-b9f3-6450fcdad183" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "28715", "uid": "9c30c3ac-12ff-4d64-b7bd-e14748d05711" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21596", "uid": "8aeb9120-ca9a-48fb-b158-4d6b083ec19c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21654", "uid": "c9f5f821-d188-49b8-8b63-1409aa9866e5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21648", "uid": "4fc249da-662e-4b65-a32f-8641819c6f47" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21644", "uid": "b1c2cee8-efab-4dfa-b44b-a16adafbd8d2" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:49Z", "name": "openshift-gitops-read", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "50e0299c-da96-4970-9fb2-7411946600cc" } ], "resourceVersion": "21551", "uid": "3fc0806f-d43e-434a-b2d7-6f679cd9d579" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:12Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1406", "uid": "3c69bbf9-7c11-43d9-bfa6-a5bc2fefad48" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "replicasets", "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:15Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1879", "uid": "cad419b0-6d3b-4a6c-aeaf-876e23c3ca53" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "privileged" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:57Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "783", "uid": "ebaac148-15f4-4eab-b415-5e4bfb9b559d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:12Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1411", "uid": "d12cecad-ab65-4c9d-a816-e6524862dd51" }, "rules": [ { "apiGroups": [ "operator.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:32Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "3475", "uid": "bfd83b73-5927-45b4-bac5-f8534f3c633f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:23Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "3123", "uid": "2a2d57df-8d5e-4cab-99be-84c8c7d75278" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:15Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1924", "uid": "9bc36ff8-e0f9-47c5-ba8b-3bcc6d00a917" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "gather" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "delete", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:16Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2251", "uid": "6a78eb34-c27b-401c-8c8a-928a0600130f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:20Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2801", "uid": "990d711d-87af-43eb-9abc-305b211a372e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:32Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "3500", "uid": "21f8ddb7-343e-4b52-8d32-bcb209eed992" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:56Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "739", "uid": "da951398-a7dc-4360-93a2-89771acf1278" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:14Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1607", "uid": "0dfc5528-5985-4586-b468-f5d3e3e1b765" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:53Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "625", "uid": "00fa9a6b-590c-4497-8e08-133ca273ac3c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:43Z", "name": "dedicated-admins-openshift-logging", "namespace": "openshift-logging", "resourceVersion": "6556", "uid": "33ee0394-3b5b-4f88-81b6-d1aacd5e7df5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "events", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "logging.openshift.io" ], "resources": [ "clusterloggings" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "persistentvolumeclaims" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:04Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1006", "uid": "0a9be5a3-5dbd-4998-911a-082f38781a36" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-autoscaler-status" ], "resources": [ "configmaps" ], "verbs": [ "delete", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:55Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "711", "uid": "e8ffdbb5-cf6f-4c63-969a-af5e4c13dd94" }, "rules": [ { "apiGroups": [ "autoscaling.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "cluster.k8s.io", "machine.openshift.io" ], "resources": [ "machinedeployments", "machinesets" ], "verbs": [ "watch", "list", "get", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors", "prometheusrules" ], "verbs": [ "watch", "list", "get", "create", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:07Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1143", "uid": "40d1fe51-da5e-47b7-b720-baf0529eea29" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:08Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1213", "uid": "3cc03d24-c376-47c2-9246-2687fc692a4e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:46Z", "labels": { "olm.managed": "true" }, "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "uid": "2629650f-42bf-41bf-a1ed-323e41f08a8b" } ], "resourceVersion": "18093", "uid": "5f19679f-2b7e-41f5-bfee-8724531e0db9" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:46Z", "labels": { "olm.managed": "true" }, "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "uid": "699178ce-761e-4c94-96e1-329720c1f1c5" } ], "resourceVersion": "18083", "uid": "1c1a999e-fc44-48d3-a34f-d97c15435979" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:43Z", "labels": { "olm.managed": "true" }, "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "uid": "dd5dd223-8ce7-412e-91f6-46fad7b48264" } ], "resourceVersion": "17981", "uid": "3915d00d-0207-4854-8092-d2e98b6f1708" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:43Z", "labels": { "olm.managed": "true" }, "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "uid": "9ed6ebbe-fa92-4b29-964e-6da15d8452d1" } ], "resourceVersion": "17976", "uid": "4ce79bcb-82a0-4a32-9c2f-b80d92111239" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:46Z", "name": "dedicated-admins-openshift-marketplace", "namespace": "openshift-marketplace", "resourceVersion": "6628", "uid": "fb4c6beb-b746-475d-88e2-8486e2a0a92e" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "catalogsources" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:47Z", "labels": { "olm.managed": "true" }, "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "uid": "d0e3d221-552a-45ef-ac59-2dfa6abc3025" } ], "resourceVersion": "18121", "uid": "665ed3cb-a26a-4370-b632-ea8f0992aff0" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:47Z", "labels": { "olm.managed": "true" }, "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "uid": "6eec09ec-b4bb-4a2a-81c1-56e4f6eeb193" } ], "resourceVersion": "18106", "uid": "b48ff5b3-7cad-4b28-af56-92d35bd3b8e9" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:49:52Z", "name": "backplane-cee", "namespace": "openshift-monitoring", "resourceVersion": "5252", "uid": "95b0ce1f-2a5d-4caf-8435-523983548190" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:21Z", "name": "backplane-lpsre", "namespace": "openshift-monitoring", "resourceVersion": "6058", "uid": "d4dbe899-8d60-4a62-9563-d8227b9ee704" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:19Z", "name": "backplane-mcs-tier-two", "namespace": "openshift-monitoring", "resourceVersion": "5958", "uid": "c2ff0ce8-3b1f-40be-9dcb-c8dd780ed432" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:50Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-metrics-api", "namespace": "openshift-monitoring", "resourceVersion": "13585", "uid": "3b5eca98-0c3c-4e82-af05-1eba98a6e73a" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "k8s" ], "resources": [ "prometheuses/api" ], "verbs": [ "get", "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:10Z", "labels": { "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1248", "uid": "596fe7e5-c2af-4516-9c42-5c8a4830599f" }, "rules": [ { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules", "alertrelabelconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules/finalizers", "alertingrules/status" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:18Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "2633", "uid": "98600e10-b2da-4752-a31f-7c08933c3876" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:49:50Z", "name": "dedicated-admins-hostedcluster-uwm", "namespace": "openshift-monitoring", "resourceVersion": "5176", "uid": "48126f61-ab79-44a1-bcf0-568aab84ca4f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmap" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "configmap" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:50Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-edit", "namespace": "openshift-monitoring", "resourceVersion": "13551", "uid": "cbd8fda6-a280-4d52-a4cb-e1b4ce1cb14d" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:50Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-view", "namespace": "openshift-monitoring", "resourceVersion": "13571", "uid": "d8228a60-8ff0-4cf5-963c-2c8adf017178" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:51Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "13708", "uid": "d991f8cf-0bc7-4d2b-a109-4f772da4e2b5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:51Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "13663", "uid": "36906fda-c063-48e7-af0f-87308d693f4e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:14Z", "labels": { "app.kubernetes.io/component": "segment-backup-installation", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/instance-namespace": "tssc-tas", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "segment-backup-nightly-metrics", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rhtas-segment-backup-job-tssc-tas", "namespace": "openshift-monitoring", "resourceVersion": "25023", "uid": "c6a0bffe-6e7f-4583-8fd6-a0c09ef63018" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:40Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3741", "uid": "cd2e1b40-55df-4df5-9dd5-23f397618ae8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:38Z", "name": "whereabouts-cni", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3701", "uid": "39f01ac4-bed2-41b3-be79-80d68f4d93f3" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:55Z", "name": "backplane-cee-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6749", "uid": "8299e14d-64a4-4c9a-83fe-69f05c0c3ca9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:20Z", "name": "backplane-csm-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6022", "uid": "d0dd1929-914b-4dd8-9119-04b5f587ac9b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:22Z", "name": "backplane-lpsre-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6079", "uid": "88da63f0-0a9e-45ee-9fbb-67b2da38d1ac" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "list", "get" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "list", "get", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:19Z", "name": "backplane-mcs-tier-two-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "5964", "uid": "987a3d88-2da7-46f7-bfee-e5b0a67fac59" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:52Z", "name": "backplane-mobb-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6718", "uid": "0a07cb9d-7f8f-401d-b8ea-7f8a0fe65460" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:20Z", "name": "backplane-srep-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6025", "uid": "4033f5ed-f1ec-424d-ad8b-ee6934b7b1a4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:56Z", "name": "backplane-tam-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6757", "uid": "390b60f3-cc71-4e48-bd17-370d614615ba" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:50Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3942", "uid": "6b04b36e-e8e5-4707-9d6d-e9e2a5fadd81" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:52Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3960", "uid": "09b7a037-8d77-40e2-9141-95ec947a79d1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:54Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3996", "uid": "3962ce8a-cd21-4109-9b86-7a3cee696c80" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:47:11Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1289", "uid": "f601a2cc-4a7e-485e-b974-f56c75623a07" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:25Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "459", "uid": "0b00f379-1f5e-4f0f-be40-14890e049950" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:45Z", "name": "dedicated-admins-openshift-operators", "namespace": "openshift-operators", "resourceVersion": "6624", "uid": "c7e4ae3e-28a7-4886-8cef-e2ba6ccf21bc" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans", "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:30Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.20.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-5FrgLNMoL4i87aJPI5rSQFezftVolV0yFP3D3E", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "6cc9b197-2211-47ff-93d1-6fbe3a4443bb" } ], "resourceVersion": "23178", "uid": "9a2fc2a1-cf01-464e-aa49-1d966212a679" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:34Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "6cc9b197-2211-47ff-93d1-6fbe3a4443bb" } ], "resourceVersion": "23208", "uid": "1f89b603-28ce-4143-af51-80c196a2d0a5" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-gitops-operator-controller-manager-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:29Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "20054", "uid": "1b34506c-247b-48a0-b9a7-583aa750b5b3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:22Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.20.2", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.20.2", "uid": "fabf8a8a-b1a3-4f62-a6af-2e6e65138352" } ], "resourceVersion": "19449", "uid": "e16f3d16-c881-46e8-b191-426fcf938749" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-gitops-operator.v1.20.2" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:14Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-read", "namespace": "openshift-operators", "resourceVersion": "19068", "uid": "38d8f28c-d920-4da3-9121-42871ab42564" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:10Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v1.21.1", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v1.21.1", "uid": "70241da5-a738-4508-8dcd-721ca81711f6" } ], "resourceVersion": "18896", "uid": "2b69fcff-992b-48be-a820-de7cb6869ded" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-pipelines-operator-rh.v1.21.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:04Z", "labels": { "olm.managed": "true" }, "name": "rhdh-operator.v1.9.3", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhdh-operator.v1.9.3", "uid": "983cd531-2475-45f5-b4b0-f26256e0a1f8" } ], "resourceVersion": "18610", "uid": "4bf5640a-49bc-488d-9d93-2bdf1d9e536d" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhdh-operator.v1.9.3" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:09Z", "labels": { "olm.managed": "true", "olm.owner": "rhdh-operator.v1.9.3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhdh.openshift-operators": "" }, "name": "rhdh-operator.v1.9.3-rhd-8DSjXahW9xiG1gZ5ND4A5s0zLrishtwqU7tiCN", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhdh-operator.v1.9.3", "uid": "513ac6af-e18d-4af2-94e7-74ae26df9215" } ], "resourceVersion": "22463", "uid": "b8ec84d1-f47b-481e-a8cd-8164b4cece51" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:18Z", "labels": { "olm.managed": "true" }, "name": "rhtas-operator.v1.3.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtas-operator.v1.3.4", "uid": "9d4f6a86-e46f-408c-b8d7-d81c114d0c0d" } ], "resourceVersion": "19239", "uid": "675f7ffc-5cec-425a-9729-6b9aed0d12ab" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtas-operator.v1.3.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:21Z", "labels": { "olm.managed": "true", "olm.owner": "rhtas-operator.v1.3.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhtas-operator.openshift-operators": "" }, "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtas-operator.v1.3.4", "uid": "05027d77-f73c-4941-b4f2-0823ef4effc6" } ], "resourceVersion": "23006", "uid": "45ea11ac-4c2f-4964-9278-53992c58e8f2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:13Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "19029", "uid": "56d1f11e-240f-4e37-ae9c-6da88a1d2e99" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-operator-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:46Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3861", "uid": "bafa0e6d-1666-429e-9196-0929ed98aef3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "create", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:44Z", "name": "openshift-ovn-kubernetes-node-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3841", "uid": "0a190ae0-8f6a-4de5-b50f-36a30eb2c9cb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:48Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "4b163389-cb86-42a0-ab43-2e5853c4662b" } ], "resourceVersion": "3890", "uid": "29011072-c228-4676-b6ba-c9b7728aee5f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "010bf21d99fe4c4514e33239871eed710307f9c4f4aa9ab5c43e329fce12806c" }, "creationTimestamp": "2026-04-27T16:18:39Z", "name": "openshift-pipelines-read", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-post-mlpnl", "uid": "8fe12d9d-9fcf-4c34-9003-08f45ce04e40" } ], "resourceVersion": "26819", "uid": "e4c9e3c6-7d80-42ff-a603-d205cf37b473" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "e4ef4c4e4ba201b454df97636f41e86b3ab85bb8cc161697e84994b1e285a945" }, "creationTimestamp": "2026-04-27T16:19:55Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-gvpn9", "uid": "95bea32f-2ea8-4242-9f0f-c6320ab346c8" } ], "resourceVersion": "28703", "uid": "e5bdc739-e2a5-4c17-9110-826dd7c346e7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "6584b40887ba6d412cfb4b1791576d1faad6e37c111b693adc00e240666eefdb" }, "creationTimestamp": "2026-04-27T16:19:55Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-gvpn9", "uid": "95bea32f-2ea8-4242-9f0f-c6320ab346c8" } ], "resourceVersion": "28697", "uid": "555a3dcb-9abd-4bc8-841b-68e941bb9ac6" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "5f6bbe9fb018ba2a86fefebb13e0c7c5f103e1f6a576cc127c254a7124baf6e7" }, "creationTimestamp": "2026-04-27T16:19:57Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-monitoring", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-gvpn9", "uid": "95bea32f-2ea8-4242-9f0f-c6320ab346c8" } ], "resourceVersion": "28748", "uid": "6b7b93e8-4c9e-4a59-9971-0ed97a864ebf" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "2c3fb4c6f264c4d9b474f3a918928846e6be927b5cae84d34b52cd7623a7e269" }, "creationTimestamp": "2026-04-27T16:19:56Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-gvpn9", "uid": "95bea32f-2ea8-4242-9f0f-c6320ab346c8" } ], "resourceVersion": "28714", "uid": "f6a05eda-0375-4d3c-a39f-2f1e1066fa57" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "5d6db2623380c3ee7ba30f929af0039df5fbae96a461df39b57daa97cd8c950a" }, "creationTimestamp": "2026-04-27T16:19:56Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-gvpn9", "uid": "95bea32f-2ea8-4242-9f0f-c6320ab346c8" } ], "resourceVersion": "28721", "uid": "bbeab949-a1ef-42a3-bb75-39f2d197ee1b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "2805bffca661f633e1d7198b0e290d9a967e69ec6e10fb5c3693426216d30195" }, "creationTimestamp": "2026-04-27T16:19:01Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-5gznt", "uid": "d0e7bb61-bb60-41d9-abc2-8c5fc1567571" } ], "resourceVersion": "27420", "uid": "2d6f35d9-bf25-4cf6-8464-b27a1cbb4ab4" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "chains-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "9085d52054e10126b499289c2c1068e99370dab88ad5472b73980f266aca49b3" }, "creationTimestamp": "2026-04-27T16:19:01Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-5gznt", "uid": "d0e7bb61-bb60-41d9-abc2-8c5fc1567571" } ], "resourceVersion": "27415", "uid": "21a8ffd0-6274-4f97-ba3f-3cfa4e1fe227" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8cccdaa5d1e92dc89935d8be92ba2ed436b4cc98514ac119ea32f0c6cd0d2c1c" }, "creationTimestamp": "2026-04-27T16:19:42Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-default-openshift-pipelines-view", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-fmjtv", "uid": "9d1ba1fe-e0fe-493b-b88e-be8020a3dd20" } ], "resourceVersion": "28410", "uid": "e6665959-d952-473c-928e-a5b2ab818d1c" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"1918d8cedc065ab20ccd564f0af4cc17c1a5101e543764779640cbf93460d3df\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-stepaction-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolverstepactions-1.21-zsplg\",\"uid\":\"cc886100-d692-4266-b83e-7bc71a6b96a0\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"stepactions\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "1918d8cedc065ab20ccd564f0af4cc17c1a5101e543764779640cbf93460d3df" }, "creationTimestamp": "2026-04-27T16:19:41Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-stepaction-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolverstepactions-1.21-zsplg", "uid": "cc886100-d692-4266-b83e-7bc71a6b96a0" } ], "resourceVersion": "28559", "uid": "e515bcf9-78a9-4f09-a4d5-70ef7e2c2201" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "stepactions" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"fb717279f9217103709c81df681c7fc3648ede26b9dcd2722530da0fcc0770c6\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-task-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolvertasks-1.21-hs69n\",\"uid\":\"1fd52263-c61c-4459-bfa2-e979b902c0a7\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"tasks\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "fb717279f9217103709c81df681c7fc3648ede26b9dcd2722530da0fcc0770c6" }, "creationTimestamp": "2026-04-27T16:19:39Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-task-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolvertasks-1.21-hs69n", "uid": "1fd52263-c61c-4459-bfa2-e979b902c0a7" } ], "resourceVersion": "28541", "uid": "a79aeda7-48ea-4c37-833b-17d60f16d8fd" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "dc53906df226f719d89b9c6df7b88435eb20b2c9fda57909ec1bb5af30cd9fd8" }, "creationTimestamp": "2026-04-27T16:18:14Z", "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-operators-proxy-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26225", "uid": "96e6dd93-af78-4ee2-92cb-facec055c1ba" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "92bf0014b4caa5dc33d35c6d990993847f5b06f3c1d8c398acf76a46fdb8570e" }, "creationTimestamp": "2026-04-27T16:18:12Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26122", "uid": "4c3ad748-c832-4699-a0ac-48287de57ee1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-controller", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "a5df08282bf87b0925103e09a85138521d7ad2e867e4bd51464769d91936a1ce" }, "creationTimestamp": "2026-04-27T16:18:12Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26124", "uid": "7c260a30-5a57-46aa-86fb-5a1d1b53694e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-events", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "20e753537854aa0826aa9a9b084fa7a8fd171aaf6b23c4f61cdc40dbd8dd9d68" }, "creationTimestamp": "2026-04-27T16:18:12Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26127", "uid": "a46db316-0542-40a9-a8ef-1e67f0705761" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "80e4edc52bd44fbd2bd993a6a8b50f2d4e410c6313500f068da305c190bd3ebf" }, "creationTimestamp": "2026-04-27T16:18:12Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26126", "uid": "c9b303a6-d789-4055-bb4c-2a58d3a68ce7" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "ba86dfb11507c2a33a2c9d728dcdc45af34e4fb17c54921d8038d3d6af1562bf" }, "creationTimestamp": "2026-04-27T16:18:13Z", "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-resolvers-namespace-rbac", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26185", "uid": "26a5880a-8c9f-47e9-8f50-58ae00565f13" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4bb767b7d70491bfb6e9f0a934a14c21581a51e65f8b02f2201531956d062fd1" }, "creationTimestamp": "2026-04-27T16:18:12Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-7qsc4", "uid": "c03a5f48-9df5-4d03-8ee1-7d0281b39e55" } ], "resourceVersion": "26123", "uid": "ab84b019-9723-4b91-93c7-4b1916c1a40a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "config-leader-election-webhook", "feature-flags" ], "resources": [ "configmaps" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "a78adeb41a26ce8c30615c2f0813f259aa60eb9a61a91a5707779f5bae7494fe" }, "creationTimestamp": "2026-04-27T16:19:06Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-qs4qj", "uid": "b9607aa9-2f01-41eb-af21-7e0dcde36dee" } ], "resourceVersion": "27579", "uid": "9f916504-0403-49e6-b1a1-712d6a989b6f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-results-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "c8f8c731388f170f72b8554de4fa59f45f6645d35b29c60212a6d72857121075" }, "creationTimestamp": "2026-04-27T16:18:41Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-admin-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-fchhp", "uid": "66376770-65f2-471a-add9-13ad224ba7a7" } ], "resourceVersion": "26912", "uid": "803e5dd0-2ec1-4190-acc7-b6a39fef43d6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4ed09b092d63dc8819f8066fe3c62db97d4011a43a410ac74464bd2cf444e313" }, "creationTimestamp": "2026-04-27T16:18:41Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-fchhp", "uid": "66376770-65f2-471a-add9-13ad224ba7a7" } ], "resourceVersion": "26916", "uid": "9ecee7ab-c380-4c62-8c7a-ae34bfcce674" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "13809112e5a0025a9d2f6a1fa5dcb1c7f6047b2c8f429463c04f2591b441e608" }, "creationTimestamp": "2026-04-27T16:18:41Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-fchhp", "uid": "66376770-65f2-471a-add9-13ad224ba7a7" } ], "resourceVersion": "26921", "uid": "82b44fb5-de01-47ca-a0f2-075df46f9bed" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "triggers-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:47:13Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "openshift-route-controllers", "namespace": "openshift-route-controller-manager", "resourceVersion": "1508", "uid": "0b6f234d-05f0-491e-9e1d-26864e2c1015" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "openshift-route-controllers" ], "resources": [ "leases" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:46:59Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "883", "uid": "edc42ef7-98a3-4701-8aaf-f085eb09c79e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:01:39Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "11555", "uid": "5d86fd5c-d67c-4201-b1e1-f56870a0c86b" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets", "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:15Z", "name": "dedicated-admins-user-workload-monitoring-create-cm", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5803", "uid": "5b2d7c42-78f2-4460-ae0a-185bccdcbfa6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:50:15Z", "name": "dedicated-admins-user-workload-monitoring-manage-am-secret", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5810", "uid": "a50f00c9-e1f8-4894-8c43-6617ae67674a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "alertmanager-user-workload" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:49Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-reader", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "13526", "uid": "5744409f-c452-4f6b-964c-40ccceb50ba2" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:50Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-writer", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "13542", "uid": "bac3d185-7af8-4007-ab14-96370f63f38a" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:51Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "13715", "uid": "426b0be2-996b-4165-9c3c-155f2a130b0c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:02:49Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "user-workload-monitoring-config-edit", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "13514", "uid": "21f5a23d-2f8d-49ff-b8c0-af7d322242e2" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "user-workload-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:47:15Z", "name": "copied-csv-viewer", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "b6697c78-f948-4abb-8f99-e044e3b8b759" } ], "resourceVersion": "1765", "uid": "b1a15150-e4b8-4de9-b09c-60eadbf18910" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "7a49b823ab40ec1d00a99cd678602e8b6119bbe7de2107df2fbfeb4df00e5d1f" }, "creationTimestamp": "2026-04-27T16:20:14Z", "labels": { "app.kubernetes.io/part-of": "pipelines-as-code" }, "name": "pipelines-as-code-templates", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-post-c8zv7", "uid": "aa9effad-8c79-4dc2-a83a-699a88059d6f" } ], "resourceVersion": "29364", "uid": "7cf74506-c328-4026-949d-071ebbb73164" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-go-template", "pipelines-as-code-java-template", "pipelines-as-code-nodejs-template", "pipelines-as-code-python-template" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:46:25Z", "name": "shared-resource-viewer", "namespace": "openshift", "resourceVersion": "454", "uid": "3a0ec531-bd84-4471-b9c3-16dde04d6cd6" }, "rules": [ { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:55Z", "labels": { "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "rhbk-operator", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp", "operators.coreos.com/rhbk-operator.rhbk-operator": "" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "6255e969-4da2-4160-bc8c-8dbf07d13133" } ], "resourceVersion": "18553", "uid": "87a2a24a-a0bf-4725-bf99-fab6ec4ae81c" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:53Z", "labels": { "olm.managed": "true" }, "name": "rhbk-operator.v26.4.11-opr.1", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "9b8d8498-465e-4778-95df-68244dc18336" } ], "resourceVersion": "18289", "uid": "44c4fe99-e0c0-4578-b454-a9c71fed8d05" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhbk-operator.v26.4.11-opr.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-ci", "resourceVersion": "29034", "uid": "2437290a-b82a-43c3-a4e2-51a411273bde" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-ci", "resourceVersion": "29063", "uid": "9fae8356-0952-42ce-9485-9ee0ef8b3809" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-development", "resourceVersion": "29141", "uid": "74f74efd-e1eb-458c-ae38-7903e829be88" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-development", "resourceVersion": "29154", "uid": "7ce1240c-353e-4b79-9b1a-aba297d49224" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-prod", "resourceVersion": "29138", "uid": "a57f44a5-8446-430a-b883-c3336daa4d26" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-prod", "resourceVersion": "29152", "uid": "419e46bf-c710-4439-a32f-d30e0542639f" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-stage", "resourceVersion": "29148", "uid": "374519b1-d41a-4717-8d58-589139342281" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-stage", "resourceVersion": "29157", "uid": "55e3f82d-480d-4a16-abe5-37a8cd552788" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:48Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21425", "uid": "32eb269d-80c3-4aad-a047-dd1ff6102298" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:47Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "28704", "uid": "595b88d4-f91d-4fa9-972f-412d75866eac" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:46Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21038", "uid": "d3b808dc-18de-4daa-abb9-550fc9b21630" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:47Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21147", "uid": "a3f344bf-b2d8-446c-9ae0-11d23697ad4e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:47Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21139", "uid": "da72d2b6-7b1c-4a2d-a408-d18f1879b443" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:47Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21132", "uid": "d535a554-cc0f-4d10-8188-89f0c1e76bc6" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:12:46Z", "name": "tssc-gitops-read", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "bc0270fb-00ce-41f5-a715-bb02dfa1d15f" } ], "resourceVersion": "21081", "uid": "0b9d829d-1e06-4e1c-bc41-0fcb4e90bcfb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:56Z", "labels": { "olm.copiedFrom": "rhbk-operator", "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-keycloak", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "5d668971-38f7-463d-8896-121e4a796e64" } ], "resourceVersion": "18379", "uid": "bab352fe-6795-4a9a-ae77-94414b2d2031" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:15Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "ctlog-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "CTlog", "name": "trusted-artifact-signer", "uid": "f6031043-c9ef-4a7d-b1ab-9ed9ea02935e" } ], "resourceVersion": "25127", "uid": "4f9c116e-95e3-4529-b597-e262d9297814" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:15Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rekor-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Rekor", "name": "trusted-artifact-signer", "uid": "a13e166a-3f04-47e1-936c-7a1ccb409912" } ], "resourceVersion": "25216", "uid": "6240d309-2de7-4593-bd7b-c5215e397e59" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:15Z", "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "trillian-logsigner", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Trillian", "name": "trusted-artifact-signer", "uid": "159f8a09-7aff-4bdd-a73c-a8346d9e4d3e" } ], "resourceVersion": "25074", "uid": "711c6778-9968-47bd-8146-064961a08419" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "update", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:18:40Z", "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf-repository-init", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "tuf-repository-init", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuf", "name": "trusted-artifact-signer", "uid": "992d692f-3bcb-49eb-9bb9-201e283e01ae" } ], "resourceVersion": "26855", "uid": "e26323bb-703d-447b-99ca-1a3eb8d4b049" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:55Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator.v1.1.4", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtpa-operator.v1.1.4", "uid": "b28cd16c-670f-4432-bbde-4e24d949b803" } ], "resourceVersion": "18352", "uid": "e1ee6452-318a-4eb2-b289-a39bbe196e5f" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtpa-operator.v1.1.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:11:57Z", "labels": { "olm.managed": "true", "olm.owner": "rhtpa-operator.v1.1.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-tpa", "olm.permissions.hash": "89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM", "operators.coreos.com/rhtpa-operator.tssc-tpa": "" }, "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtpa-operator.v1.1.4", "uid": "1dda7e49-3be5-4c31-883f-298e3f450fb2" } ], "resourceVersion": "18968", "uid": "91ec2914-1ce8-44ba-b86e-8b43acadc241" }, "rules": [ { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }