{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:24Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "12380", "uid": "5a5f3468-20a1-4744-82ed-5108a607ab3d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "261", "uid": "5d890533-f63e-4d1d-9cfe-dbc81d8e0981" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-info" ], "resources": [ "configmaps" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "255", "uid": "658c51fe-88da-48f8-9e19-bb924b03e028" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "extension-apiserver-authentication" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:24Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "12411", "uid": "e9c8b9ff-b0f2-4bd8-b95b-92906d15f931" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "259", "uid": "1a78a077-3125-4a51-9043-57b6b65b61af" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-controller-manager" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "260", "uid": "d5fb84b7-4f1e-468e-8571-393bf1181d85" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-scheduler" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "256", "uid": "cb6218c5-27a1-44c0-979d-d24faa2366cc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "257", "uid": "ff5e26d5-aa18-4fa1-9a9d-1961e41e7c3f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:34Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "258", "uid": "0f3d2fc3-1a31-4630-b343-44817c060efd" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "watch" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:48Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:leader-election-lock-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "1568", "uid": "fb45b43e-3603-4edd-8263-216352fb43f4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:25Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "582", "uid": "6696ff33-007b-435c-be9c-03039d7d4bf6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:48Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1563", "uid": "56b40201-174a-4cc4-b5fa-a24cb2a24b02" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:29Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "739", "uid": "83148e23-6c70-47ce-ad97-715c74654b0a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:06:03Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "3273", "uid": "60521462-6e86-426e-ae6e-94402036b2c2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:32Z", "name": "backplane-cee-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5391", "uid": "bc869eaf-9c2c-41e6-9009-7a08a1c7c03e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:53Z", "name": "backplane-csm-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5842", "uid": "d2e1252b-87b5-424b-a794-f3f6adceb79e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:25Z", "name": "backplane-mcs-tier-two-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5186", "uid": "dbd177be-f7f3-43ae-8f3c-46ac23dc9fd0" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:40Z", "name": "backplane-mobb-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6686", "uid": "487378b5-dde0-4832-852b-40a54d837ec3" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:30Z", "name": "backplane-srep-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5343", "uid": "6757a11f-6a3e-4d3a-8dc9-42c038d1b5ee" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:26Z", "name": "backplane-tam-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5223", "uid": "3ce5881d-41e9-4dea-9494-6fb8ed707866" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:13Z", "name": "osd-delete-backplane-script-resources", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "4847", "uid": "ef47540a-e5c3-40e5-b409-3fbca78b639a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "serviceaccounts" ], "verbs": [ "get", "list", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:39Z", "name": "cloud-credential-operator-role", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1092", "uid": "1e0e9cb5-c8dd-4670-afa1-abd821b6bf5a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "events", "serviceaccounts", "services", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "*" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:26Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "604", "uid": "cdaabb00-f7e5-468b-ab49-e7ed7e45d290" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:10Z", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "3441", "uid": "4a16f73e-f41e-4b5e-837b-c8239253177f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:56Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "2222", "uid": "bd388c4b-803c-4c03-8f77-367adc6d82f0" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:47Z", "name": "aws-ebs-csi-driver-operator-role", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1434", "uid": "45676df0-245e-45e9-962f-7d4e50375c61" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps", "secrets", "persistentvolumeclaims" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "watch", "list", "get", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "get", "create", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:30Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "789", "uid": "6c2fe8d5-4d28-4200-aea8-fb180ee6879a" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:26Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "639", "uid": "f2f77c9f-705a-4d66-9014-03ab351bee8c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:36Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "969", "uid": "5bc1b7d8-bda7-4865-a28b-6c272032778c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:45Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1340", "uid": "8c7b6296-1624-45fc-bfb0-2f62aa375518" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:19:57Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "13784", "uid": "28f59d87-24cb-41e5-82ea-c8c57b65e822" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:38Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1087", "uid": "bbacf7cb-e573-4548-ac36-0fb8b9953b5a" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:42Z", "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1217", "uid": "17a4595a-52ab-4937-b3ca-6e25e39218aa" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts", "services", "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:29Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "737", "uid": "cc2aa6c4-2f4f-4bfb-9bc5-813e7fa5f81c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"include.release.openshift.io/self-managed-high-availability\":\"true\",\"kubernetes.io/description\":\"Grant access to monitor the cluster-version operator's metrics.\"},\"name\":\"prometheus-k8s\",\"namespace\":\"openshift-cluster-version\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n", "kubernetes.io/description": "Grant access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-04-27T19:05:20Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "resourceVersion": "510", "uid": "8b646c60-8df1-4654-b081-1fc33a5e5c92" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:34Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "932", "uid": "843eb275-a57c-465c-9624-094ff3acb408" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kube-cloud-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1829", "uid": "41e54295-2763-4bbc-8d7b-581625126110" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1826", "uid": "69f7468d-dd27-4c68-ae01-57e764239f6b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "create", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1828", "uid": "3e100b12-5933-4b4c-8191-0631cf5f1359" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:50Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1747", "uid": "dcbfefa0-020e-493e-b1e1-28e204fd0fe4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:33Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "895", "uid": "3a3e8d4f-a038-4c65-b304-8215819e766a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "csr-controller-ca" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "openshift.io/description": "Can read the openshift-network-features ConfigMap values" }, "creationTimestamp": "2026-04-27T19:06:28Z", "name": "openshift-network-public-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4231", "uid": "7fcfdd83-ed60-4fd9-98c1-354dadb90a21" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-network-features" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:49Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "1717", "uid": "7e4be9c6-18ec-41f6-8469-9c610e4fee40" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "oauth-serving-cert" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:47Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1478", "uid": "a4871344-e7cd-4de7-84d2-bd73749ea687" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:36Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "995", "uid": "d11340f5-7724-40ff-bce0-3f91e7c1b231" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cloud-provider-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1830", "uid": "662943c9-4f08-4066-8b22-836cb31ecee7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T19:05:49Z", "name": "coreos-pull-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1675", "uid": "fc3cd689-03fe-4f40-bc4b-0d1774867871" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:51Z", "name": "dedicated-admins-project-request", "namespace": "openshift-config", "resourceVersion": "5754", "uid": "38c62f37-e585-4969-86e6-20674d5db426" }, "rules": [ { "apiGroups": [ "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:19Z", "name": "dedicated-admins-registry-cas-project", "namespace": "openshift-config", "resourceVersion": "5012", "uid": "bc9c35f7-8e44-4067-9e35-9f1d96480d1f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "registry-cas" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:45Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1339", "uid": "c4013da9-9305-44cc-978c-7aeee7d6fe80" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:47Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1475", "uid": "b76891b2-0396-4d8e-b4de-394611ec2112" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pull-secret", "support" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1836", "uid": "47d4edde-28dd-4a02-bb24-fe369da99de1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "events" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update" ] }, { "apiGroups": [ "console.openshift.io" ], "resources": [ "consolenotifications" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "olmconfigs" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:06:04Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "3311", "uid": "be94bee5-4722-4bd7-9d24-bf8901ca0ae4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1831", "uid": "32be282a-e12e-4baa-b332-0e78e396f37c" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1825", "uid": "b07683a9-494a-477d-9907-2b58d693e6ff" }, "rules": [ { "apiGroups": [ "console.openshift.io" ], "resources": [ "consoles" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services", "events", "configmaps", "secrets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes", "routes/custom-host" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:06:04Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "3316", "uid": "ce2a5df6-d390-43a6-b15f-667f488edd31" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:25Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "581", "uid": "c0c9bc53-3519-4e8a-a39e-099baf187ea3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:12Z", "name": "dedicated-admins-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "4804", "uid": "1cc821b7-5cd2-4cfd-9637-e624517e2629" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "prometheuses", "prometheusrules", "servicemonitors", "podmonitors", "thanosrulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "alertmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "extensions", "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "pods", "replicationcontrollers", "replicationcontrollers/scale", "services" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "deployments", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests" ], "verbs": [ "*" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:12Z", "name": "prometheus-k8s-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "4802", "uid": "c38b9b5e-233d-418f-8387-e1f7bdf36540" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:36Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "968", "uid": "18f8f997-5842-432a-8a6d-04b23d46311c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:33Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "879", "uid": "d906f45a-1e24-4543-b58c-567dba022d73" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:28Z", "name": "dedicated-admins-openshift-dns", "namespace": "openshift-dns", "resourceVersion": "5294", "uid": "31ed0447-8f6b-4fc1-90d7-35e44f8f93ba" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:48Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "1602", "uid": "c008dcdd-1356-4d7f-bb0b-a61a42f39853" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:50Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17833", "uid": "65e934fb-0aa5-45ef-ae45-da9c1e8ac8fd" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "27250", "uid": "00398a75-5e5a-49bc-8b97-4fffc6626469" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17586", "uid": "ca40f401-5a2b-4c48-b2af-e1679580e62d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17665", "uid": "ce8d6c10-57c1-4da5-990b-a288777e22ab" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17660", "uid": "aba5b373-5c3e-4d7b-b287-018bd502ca96" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17655", "uid": "a4d2289f-dcce-48e5-9753-3afe26c7a7e9" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "name": "openshift-gitops-read", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "c9a4fa18-2de1-4025-a6e6-0ac13a03771d" } ], "resourceVersion": "17580", "uid": "6d45c51c-c0bb-49ba-889f-1488a34a4c94" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:46Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1349", "uid": "39c5a3b6-5aa7-4a13-a3f6-23f8423ce791" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "replicasets", "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:48Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1654", "uid": "2a7e05d6-9622-4d5c-8b74-8476ce14688c" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "privileged" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:32Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "870", "uid": "531804e9-e5a5-42b4-8ba0-ab36e28cb0ce" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:44Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1326", "uid": "f9a9861d-be80-445c-b4e3-7fe2980ff349" }, "rules": [ { "apiGroups": [ "operator.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:06:04Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "3274", "uid": "5b05a557-fad7-4391-8034-8d4ea0865cc1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:57Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "2579", "uid": "d065d2ce-fa2d-4b60-a8f0-93131be5671d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:48Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1613", "uid": "12d3c7f7-67be-4907-b6ed-b426386c420a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "gather" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "delete", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:49Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1726", "uid": "8a11b59c-89f6-4eb8-a2a2-c9b1f538287b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:53Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1900", "uid": "92b0c0d2-55c1-433b-a836-204af7e06849" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:06:04Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "3277", "uid": "634aa8ed-f092-4bdd-b8a7-87bca983822a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:30Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "749", "uid": "eee7450f-d74b-4a74-9378-ab52c8a80066" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:47Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1513", "uid": "5042f915-8855-46c8-bc12-a534dfee6d2e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:26Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "595", "uid": "c9770079-558e-47a0-881d-aaa1d64fe63e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:11Z", "name": "dedicated-admins-openshift-logging", "namespace": "openshift-logging", "resourceVersion": "4646", "uid": "3a5ec743-aba8-46eb-971a-10947ab955b9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "events", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "logging.openshift.io" ], "resources": [ "clusterloggings" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "persistentvolumeclaims" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:36Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "993", "uid": "6a9b991c-6ca0-4f6d-ab17-00d0249c205e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-autoscaler-status" ], "resources": [ "configmaps" ], "verbs": [ "delete", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:27Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "665", "uid": "5bc003f5-b354-4b35-a97e-6a1eb8027ec7" }, "rules": [ { "apiGroups": [ "autoscaling.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "cluster.k8s.io", "machine.openshift.io" ], "resources": [ "machinedeployments", "machinesets" ], "verbs": [ "watch", "list", "get", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors", "prometheusrules" ], "verbs": [ "watch", "list", "get", "create", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:40Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1177", "uid": "2912ad48-57a5-45ed-a8c0-e7cacaf83f42" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:42Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1201", "uid": "19098a67-d365-44e3-b667-12bbfcc96846" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:01Z", "labels": { "olm.managed": "true" }, "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "uid": "5e695cb0-2c71-4e30-a79c-ccc1a84d3e69" } ], "resourceVersion": "16298", "uid": "2c8469de-544d-4ba7-9a3e-92adc149115b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:01Z", "labels": { "olm.managed": "true" }, "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "uid": "9bf32865-7184-4aae-9c37-d1fbd66bf0f8" } ], "resourceVersion": "16303", "uid": "9adc1922-3729-46ee-8498-5ce623cbd8d7" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:25:58Z", "labels": { "olm.managed": "true" }, "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "uid": "60cee21f-c91b-4bf7-ae85-8eb821c0f254" } ], "resourceVersion": "16237", "uid": "345568ae-8cd5-4401-bde3-b084de954aba" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:25:58Z", "labels": { "olm.managed": "true" }, "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "uid": "80c5c9c5-180b-471e-82f7-fef5d1647839" } ], "resourceVersion": "16229", "uid": "46fa34c8-d846-4154-8023-fb6d76cacd40" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:28Z", "name": "dedicated-admins-openshift-marketplace", "namespace": "openshift-marketplace", "resourceVersion": "5287", "uid": "6657c8a8-702b-4e1d-bef8-3835485402f8" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "catalogsources" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:02Z", "labels": { "olm.managed": "true" }, "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "uid": "411867d8-e544-43b3-80a3-92edd2874c28" } ], "resourceVersion": "16315", "uid": "c2581e09-9278-4ed1-829d-86352b20b27d" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:02Z", "labels": { "olm.managed": "true" }, "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "uid": "4f89491f-0036-4371-9d51-110eb9a95911" } ], "resourceVersion": "16330", "uid": "6943d387-56c6-4e49-ae00-b37f189e3faa" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:31Z", "name": "backplane-cee", "namespace": "openshift-monitoring", "resourceVersion": "5381", "uid": "79f8caa9-95cf-4a43-81d4-d8234cc794ea" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:21Z", "name": "backplane-lpsre", "namespace": "openshift-monitoring", "resourceVersion": "5069", "uid": "0a2d6e11-f300-415d-9e33-858163428748" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:25Z", "name": "backplane-mcs-tier-two", "namespace": "openshift-monitoring", "resourceVersion": "5173", "uid": "1090a498-c54c-42a3-977d-1a22bc6d2682" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-metrics-api", "namespace": "openshift-monitoring", "resourceVersion": "12248", "uid": "3986f1c9-a693-482b-a167-2852da1bbe4f" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "k8s" ], "resources": [ "prometheuses/api" ], "verbs": [ "get", "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:43Z", "labels": { "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1248", "uid": "ebfd099c-77fb-405b-8e4c-b2982df7daba" }, "rules": [ { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules", "alertrelabelconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules/finalizers", "alertingrules/status" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:51Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1834", "uid": "d88a7ce0-e0f8-4a00-993f-12634133e7cf" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:51Z", "name": "dedicated-admins-hostedcluster-uwm", "namespace": "openshift-monitoring", "resourceVersion": "5769", "uid": "1229706a-54ff-4b78-bfd5-06b3015f8c91" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmap" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "configmap" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-edit", "namespace": "openshift-monitoring", "resourceVersion": "12216", "uid": "f93873ff-9c19-45b0-876d-d5265a0dc8f6" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-view", "namespace": "openshift-monitoring", "resourceVersion": "12225", "uid": "a14dd30d-92fe-4d7c-b105-201ef1716351" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:24Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "12425", "uid": "058ea893-a1ec-4657-9fa6-fb7fe3fc59c3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:24Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "12376", "uid": "0de2a340-f809-4a8f-8bd1-28e4c8652a73" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:30:12Z", "labels": { "app.kubernetes.io/component": "segment-backup-installation", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/instance-namespace": "tssc-tas", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "segment-backup-nightly-metrics", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rhtas-segment-backup-job-tssc-tas", "namespace": "openshift-monitoring", "resourceVersion": "23195", "uid": "a1117136-8680-4a35-8ea7-4dbcf9724004" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:16Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "3648", "uid": "14140d7b-34a0-46f2-8434-f20dae9ecfa7" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:13Z", "name": "whereabouts-cni", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "3562", "uid": "19f52417-d734-485a-be04-15f38d027069" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:29Z", "name": "backplane-cee-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6486", "uid": "7e9d1930-ffa9-42d1-9d45-954066ef2147" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:53Z", "name": "backplane-csm-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "5837", "uid": "c9d64abe-920a-45f5-84a2-b6fb342b9c56" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:23Z", "name": "backplane-lpsre-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6431", "uid": "7cba61d1-7b8f-4ba8-8d8c-abf329e0d463" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "list", "get" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "list", "get", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:24Z", "name": "backplane-mcs-tier-two-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6445", "uid": "b50c5bc3-0bb4-4687-8b72-e580cdacd192" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:40Z", "name": "backplane-mobb-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6629", "uid": "699b3b44-f38a-41d3-8a7b-8fa18f6e9582" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:26Z", "name": "backplane-srep-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6465", "uid": "968b72a4-814b-429c-ace0-33bbb001a60a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:08:25Z", "name": "backplane-tam-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6459", "uid": "d93f7617-a049-48d1-bf2c-bd0943cc57ce" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:26Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4176", "uid": "6de4c90c-b50c-449b-99f3-bed94102a06c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:27Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4215", "uid": "e5af2057-2047-4891-85e2-fa0d8d42ffa6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:30Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4273", "uid": "4dab37b3-eca3-4283-96f4-52c32f9a8278" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:44Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1277", "uid": "9c5d5008-f587-4d10-b4f3-912ae6f3b54c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:43Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "461", "uid": "486f5685-8f1c-409a-babe-b298e5313e1d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:28Z", "name": "dedicated-admins-openshift-operators", "namespace": "openshift-operators", "resourceVersion": "5279", "uid": "54ecf420-e0b1-4300-9435-9fd517b17bcc" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans", "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:41Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.20.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-5FrgLNMoL4i87aJPI5rSQFezftVolV0yFP3D3E", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "500f375d-9baa-46fc-b821-50ee78067577" } ], "resourceVersion": "21293", "uid": "0f2c8450-890e-40b4-b097-3ef13b14a9db" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:43Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "500f375d-9baa-46fc-b821-50ee78067577" } ], "resourceVersion": "21013", "uid": "838a3556-5012-4ea1-86c8-f74e47eebf05" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-gitops-operator-controller-manager-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:35Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "16941", "uid": "cfba2d53-cf11-4fcd-9dc3-93145657682c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:30Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.20.2", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.20.2", "uid": "47d56279-4b3b-42cd-b607-c9227e12ac39" } ], "resourceVersion": "16772", "uid": "12ac5b15-0bcd-4b4c-9e8b-8fa6f72433ff" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-gitops-operator.v1.20.2" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:53Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-read", "namespace": "openshift-operators", "resourceVersion": "18086", "uid": "0cd2f227-54c8-49ec-bf1c-25b355b74166" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:49Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v1.21.1", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v1.21.1", "uid": "60b5c4d1-46cd-440d-ad62-4fea808e0d59" } ], "resourceVersion": "17727", "uid": "dc9e08fb-01a8-4718-b523-ee3ffdc56976" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-pipelines-operator-rh.v1.21.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:55Z", "labels": { "olm.managed": "true" }, "name": "rhdh-operator.v1.9.3", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhdh-operator.v1.9.3", "uid": "24954d58-b310-405f-a1d2-45c376ee9f3b" } ], "resourceVersion": "18183", "uid": "14bd5366-3dd5-488e-ab51-10bb39f4cf42" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhdh-operator.v1.9.3" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:57Z", "labels": { "olm.managed": "true", "olm.owner": "rhdh-operator.v1.9.3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhdh.openshift-operators": "" }, "name": "rhdh-operator.v1.9.3-rhd-8DSjXahW9xiG1gZ5ND4A5s0zLrishtwqU7tiCN", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhdh-operator.v1.9.3", "uid": "151ea249-b7b4-4ec8-b338-f965f243a192" } ], "resourceVersion": "21744", "uid": "94ebd707-1e5f-46fc-a1e2-2c0c352fd70f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:42Z", "labels": { "olm.managed": "true" }, "name": "rhtas-operator.v1.3.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtas-operator.v1.3.4", "uid": "66dfae2b-35ce-4664-902a-41ffe04806d7" } ], "resourceVersion": "17301", "uid": "5291e631-404b-4cf8-8d37-18c75deb5395" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtas-operator.v1.3.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:48Z", "labels": { "olm.managed": "true", "olm.owner": "rhtas-operator.v1.3.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhtas-operator.openshift-operators": "" }, "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtas-operator.v1.3.4", "uid": "1d11782d-9e5f-4746-bd7b-5dace1365da3" } ], "resourceVersion": "21461", "uid": "8abc2df0-fb5f-401b-8e7c-a67b20b6b02e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:50Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "17924", "uid": "7e1b230d-ccb6-4574-9092-f042fe26696b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-operator-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:22Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4026", "uid": "b36b10c4-fb47-4c34-ab5d-888ee428ec27" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "create", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:20Z", "name": "openshift-ovn-kubernetes-node-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "3845", "uid": "56c7251e-fd22-436c-b397-0f12e1fc9355" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:06:24Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "70b99b04-06da-4e39-ba47-62c2c487a04e" } ], "resourceVersion": "4093", "uid": "878c8d62-586e-43ea-9791-9dd6bc997828" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "fc9c988fed9ea30bc47bc9c09a79ec553c4c8771d72ec1fb5ec0dafa8b2f57b3" }, "creationTimestamp": "2026-04-27T19:31:35Z", "name": "openshift-pipelines-read", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-post-79ttz", "uid": "8434334e-46e4-4f30-8fa7-113bd9e9be68" } ], "resourceVersion": "25147", "uid": "c47e4ccc-bc86-4056-a52a-1898ba04b923" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "79ae94a3ac2f74837a48929fe8d68238ab1f37cd68cec5b82028f78b602b371f" }, "creationTimestamp": "2026-04-27T19:32:51Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-mt67v", "uid": "4699c67c-fa09-48e6-85d7-d72559e0ba70" } ], "resourceVersion": "27226", "uid": "ddb029d2-b437-4b62-a853-8da20303febe" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "95483fd3c011ce0d865abda9199a1445ba35359776cb834717856ae3a11386a2" }, "creationTimestamp": "2026-04-27T19:32:51Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-mt67v", "uid": "4699c67c-fa09-48e6-85d7-d72559e0ba70" } ], "resourceVersion": "27219", "uid": "77857a76-aea6-49c7-b1e8-a210a60808d3" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "622fd02dd8cebf9a29e89d8b4f1f85828eb1be846f692ad3a70e97fdeb5bf4ff" }, "creationTimestamp": "2026-04-27T19:32:52Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-monitoring", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-mt67v", "uid": "4699c67c-fa09-48e6-85d7-d72559e0ba70" } ], "resourceVersion": "27268", "uid": "95d5bece-1065-4f9b-b70a-8dcbd1940bcf" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "09fd7a451e6ef018fdcd21eee436a009dd26e448307f732a607ebfcede18b414" }, "creationTimestamp": "2026-04-27T19:32:51Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-mt67v", "uid": "4699c67c-fa09-48e6-85d7-d72559e0ba70" } ], "resourceVersion": "27240", "uid": "484ed60e-fc94-4702-9b31-f383af48ea1e" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "50e342f590eb24fe4c317f07c555c2ecb756c6786df6351c09f88e4162aef1f1" }, "creationTimestamp": "2026-04-27T19:32:52Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-mt67v", "uid": "4699c67c-fa09-48e6-85d7-d72559e0ba70" } ], "resourceVersion": "27252", "uid": "5c6f96ad-986d-419a-885e-1bbacd2f36a2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "970df9024b632e93fca19162a83dacd93e0e9a32e18d706edbd99368f3660f9c" }, "creationTimestamp": "2026-04-27T19:31:57Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-nfbn7", "uid": "801b03ac-6211-42c9-b452-5664c8270773" } ], "resourceVersion": "25766", "uid": "53abd246-2a28-421a-9353-0acbfcaeb527" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "chains-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "159881bdee2d353137e12ec08a66c667e55a22508adac0aad97661db6d60918f" }, "creationTimestamp": "2026-04-27T19:31:57Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-nfbn7", "uid": "801b03ac-6211-42c9-b452-5664c8270773" } ], "resourceVersion": "25762", "uid": "5b65125a-e6ba-4078-b0bc-3325c1ed2408" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4fb9bb2265c388762b93cbee0087916c669bb5ee56e621cc70fb77116516c366" }, "creationTimestamp": "2026-04-27T19:32:38Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-default-openshift-pipelines-view", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-rmlts", "uid": "a857482b-2e4a-4e8d-b21b-0c29f6d15311" } ], "resourceVersion": "26910", "uid": "bc436f98-1b15-451b-a264-cba72a424d50" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"7f4e8eb0d17205d42f1e56f755759b2557fafdb82cbdfe8a38b5468386ed7589\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-stepaction-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolverstepactions-1.21-56qgz\",\"uid\":\"4b011548-e9fe-403d-bcf1-1cbe8208af85\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"stepactions\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "7f4e8eb0d17205d42f1e56f755759b2557fafdb82cbdfe8a38b5468386ed7589" }, "creationTimestamp": "2026-04-27T19:32:38Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-stepaction-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolverstepactions-1.21-56qgz", "uid": "4b011548-e9fe-403d-bcf1-1cbe8208af85" } ], "resourceVersion": "27060", "uid": "774d8e6c-5512-49cb-b344-c76cb5d9d9a8" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "stepactions" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"26c9b1667da3549a7d8a8763f09f4cfdf2054e41c92a055602b6d07453b83543\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-task-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolvertasks-1.21-rv8d8\",\"uid\":\"a5088c89-969b-4be7-adc7-b82f7e1b5810\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"tasks\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "26c9b1667da3549a7d8a8763f09f4cfdf2054e41c92a055602b6d07453b83543" }, "creationTimestamp": "2026-04-27T19:32:36Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-task-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolvertasks-1.21-rv8d8", "uid": "a5088c89-969b-4be7-adc7-b82f7e1b5810" } ], "resourceVersion": "27044", "uid": "6dfc9f63-1e0b-4465-85bd-1c1a5495c4c5" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "c332db934bc94acf9e35de45ce5e7d8105ba6ffb126375f40dc951fff9b94c8e" }, "creationTimestamp": "2026-04-27T19:31:13Z", "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-operators-proxy-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24491", "uid": "6a798018-ef50-4cc5-baa1-b6700ef0de51" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "a1294b3a978dcf7f3f4a137cd016ac0f3c122f4981bff456d887a57ecd84d8f3" }, "creationTimestamp": "2026-04-27T19:31:10Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24402", "uid": "21d7142c-6a03-4ee6-b87b-db53559c5e88" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-controller", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "6771990c6fb5faf1352ab6e00da5c0ea3377e22697c3a1189869a71d3541e360" }, "creationTimestamp": "2026-04-27T19:31:10Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24406", "uid": "f24f2b0c-9f3a-4f4e-8e2f-ebf793753338" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-events", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "3302919ac53b645563f15a8d36e776895c00c4d20e0fd2fb304cbfee0e10afae" }, "creationTimestamp": "2026-04-27T19:31:10Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24410", "uid": "c57ad6bc-d33f-40f7-b732-0d29291a7a0a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "ece9f3b16272807ae14d6981aaf734096637e9018784bca671ad66d0b512772a" }, "creationTimestamp": "2026-04-27T19:31:10Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24409", "uid": "81caac88-c2f6-49f2-881f-fadbd645258c" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8029e8f1f547e927efd438a13aefe6855eae44513493d41131786e87bd10580c" }, "creationTimestamp": "2026-04-27T19:31:12Z", "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-resolvers-namespace-rbac", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24456", "uid": "96c4df83-860e-4139-9134-2024e7acc04b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "ba6599160b21f0455b23c1590ea48a1c63c76030528d3114eb74334efdc1c5c3" }, "creationTimestamp": "2026-04-27T19:31:10Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-646lb", "uid": "f839a0b7-2687-4fb0-90a6-d2aa40db77ac" } ], "resourceVersion": "24404", "uid": "1014df61-5a0e-48db-918e-ad49924f5440" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "config-leader-election-webhook", "feature-flags" ], "resources": [ "configmaps" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "f39a1ca5f82f4e897a58a9f1b2f95c1415cef06fbf8af5afff06d25a733ed34f" }, "creationTimestamp": "2026-04-27T19:32:02Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-pmwbj", "uid": "86df2939-ef42-47a6-ae29-ce4bcb29154b" } ], "resourceVersion": "25968", "uid": "c5edb996-b20a-4088-943a-49ff9198d13c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-results-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "2f5cd9e33c8621c5f345c8fba8baca01bfbfa345a3809405212100fe960c9887" }, "creationTimestamp": "2026-04-27T19:31:37Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-admin-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-gcwsk", "uid": "f89995f7-d0ac-49db-948e-83fc6a3a21d4" } ], "resourceVersion": "25243", "uid": "95208a1a-7428-475c-8392-6c38c2e6123b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "12b6e6fafa9675c648d11cdb60bcd908b673e00b1d37fdfe64e827aa9d1f6304" }, "creationTimestamp": "2026-04-27T19:31:37Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-gcwsk", "uid": "f89995f7-d0ac-49db-948e-83fc6a3a21d4" } ], "resourceVersion": "25252", "uid": "7cfab125-fff6-4ceb-9a14-a143bf4e6c89" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "ebfe2619f256aefd68cdba56e95cef79db5803ad951cf1411283e44dc2c6f144" }, "creationTimestamp": "2026-04-27T19:31:37Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-gcwsk", "uid": "f89995f7-d0ac-49db-948e-83fc6a3a21d4" } ], "resourceVersion": "25258", "uid": "61d06d5a-06b2-4b50-97e5-087d6360426d" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "triggers-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:05:48Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "openshift-route-controllers", "namespace": "openshift-route-controller-manager", "resourceVersion": "1552", "uid": "a5f31fb4-f6f7-4409-a11b-1f838c39a358" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "openshift-route-controllers" ], "resources": [ "leases" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T19:05:33Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "874", "uid": "77f086f9-8590-4652-ad0f-1ccf942babdc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:18:45Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "10804", "uid": "0971d966-6645-4636-be31-fa2905657bc0" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets", "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:31Z", "name": "dedicated-admins-user-workload-monitoring-create-cm", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5353", "uid": "34b52fab-9f34-494d-a75c-6dc038c3d77f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:07:31Z", "name": "dedicated-admins-user-workload-monitoring-manage-am-secret", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "5375", "uid": "0eb2010f-ab8f-4043-a332-ccbf6284b540" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "alertmanager-user-workload" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-reader", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12191", "uid": "fabdca6a-84a2-480a-a03a-c77ec3adfeb8" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-writer", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12201", "uid": "3bc708a4-ed50-4379-a9fb-04e518a9b608" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:25Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.2.1" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12435", "uid": "d7c0b03a-d28e-4b17-ba1a-69e0173d17af" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:19:23Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "user-workload-monitoring-config-edit", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12187", "uid": "cf3a1e93-e139-4af2-8744-baf94a67ff09" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "user-workload-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:05:47Z", "name": "copied-csv-viewer", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "8453241f-250f-44f4-bbf3-5b38222ce7b7" } ], "resourceVersion": "1469", "uid": "e39031c1-5481-4544-a196-9889e564eb34" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4943869762416784d4f8a8891743372b9e3ad93614b0ead7e39bf9f737211a17" }, "creationTimestamp": "2026-04-27T19:33:10Z", "labels": { "app.kubernetes.io/part-of": "pipelines-as-code" }, "name": "pipelines-as-code-templates", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-post-svnvl", "uid": "8745ba5c-c67c-40d2-bc3d-ef27d07fa3d8" } ], "resourceVersion": "27875", "uid": "b7867631-be6e-458a-90d9-c50511adcd70" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-go-template", "pipelines-as-code-java-template", "pipelines-as-code-nodejs-template", "pipelines-as-code-python-template" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T19:04:43Z", "name": "shared-resource-viewer", "namespace": "openshift", "resourceVersion": "456", "uid": "721f3852-acd1-4b3b-acc1-90621835134b" }, "rules": [ { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:27Z", "labels": { "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "rhbk-operator", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp", "operators.coreos.com/rhbk-operator.rhbk-operator": "" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "0c9d849c-bd57-4adb-88eb-1d3a7fe6f6cd" } ], "resourceVersion": "16835", "uid": "47c6cedb-9ed0-4d03-973f-3e3ba89421ce" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:26Z", "labels": { "olm.managed": "true" }, "name": "rhbk-operator.v26.4.11-opr.1", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "5a997d78-607b-4117-a140-c0a80279b246" } ], "resourceVersion": "16640", "uid": "56cb54e6-2f8a-470e-bc57-94c3c1ba5293" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhbk-operator.v26.4.11-opr.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-ci", "resourceVersion": "27634", "uid": "027b3157-ef72-4956-b284-050970d3cc35" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-ci", "resourceVersion": "27695", "uid": "85b5085e-1843-4b7f-8cd4-60d21efebcef" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-development", "resourceVersion": "27665", "uid": "10933f35-1cd7-49a1-b0b2-440fe05ea56c" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-development", "resourceVersion": "27705", "uid": "ae4366fc-e577-4798-a6e5-5df760c67687" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-prod", "resourceVersion": "27684", "uid": "0d881bdb-ea4d-4b0e-bae7-b38a481efd1b" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:06Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-prod", "resourceVersion": "27711", "uid": "8b9330ae-5258-460a-9f08-97cdbeac5a1c" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:07Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-stage", "resourceVersion": "27787", "uid": "d41babc1-90b4-4803-8f34-42648789138e" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:33:07Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-stage", "resourceVersion": "27790", "uid": "8f2980a4-8148-41a7-9935-03672f59b407" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:15Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "20016", "uid": "a1ef3fd5-dcd3-403d-b3d6-ce8acd7a8dc1" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "27239", "uid": "54259bf2-9d4e-4614-bf4d-88d07d867ff8" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "19693", "uid": "6122e103-3b0c-4b86-b23b-2ac792de7a1a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "19740", "uid": "42ff7889-4895-43a0-a61f-a2b9a1659b34" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "19735", "uid": "98458d33-4a74-4caa-8071-901327126a41" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "19729", "uid": "a2a08d28-0b14-4d72-8521-35c568dda859" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:27:11Z", "name": "tssc-gitops-read", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "c0411a49-2cf0-415e-b743-722f538d582a" } ], "resourceVersion": "19674", "uid": "daa820b4-1525-403a-9ab6-e88152bd01d0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:27Z", "labels": { "olm.copiedFrom": "rhbk-operator", "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-keycloak", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "131ad3cc-3c7e-4500-8534-eefdb9cce629" } ], "resourceVersion": "16676", "uid": "a03da87e-a2b6-481d-b9e3-975a3aa5e74a" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:30:14Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "ctlog-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "CTlog", "name": "trusted-artifact-signer", "uid": "5c94549b-afb3-4bd6-950f-ae3a4d2334d6" } ], "resourceVersion": "23328", "uid": "87f26117-e0cb-49a8-ba4a-63e5713effe6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:30:14Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rekor-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Rekor", "name": "trusted-artifact-signer", "uid": "37e201be-7b5a-40e4-a965-ec45c087dd78" } ], "resourceVersion": "23388", "uid": "6a4a707b-2537-4faa-930f-dc6df19695bc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:30:13Z", "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "trillian-logsigner", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Trillian", "name": "trusted-artifact-signer", "uid": "82f925d3-7771-4ef3-9053-42d7522cf17d" } ], "resourceVersion": "23249", "uid": "47eb7c2a-c08a-4373-bd03-7218d21a5636" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "update", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:31:39Z", "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf-repository-init", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "tuf-repository-init", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuf", "name": "trusted-artifact-signer", "uid": "da32aaf5-43f3-4a5e-a6e1-c06bde378c09" } ], "resourceVersion": "25326", "uid": "e7146a9e-2047-4b93-ac90-7251b45154bb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:35Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator.v1.1.4", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtpa-operator.v1.1.4", "uid": "226079c9-7e02-41ed-b1ef-b1f5bb0455c5" } ], "resourceVersion": "16943", "uid": "c4f328b9-60f2-41c3-b6dc-2dbca01fef59" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtpa-operator.v1.1.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T19:26:38Z", "labels": { "olm.managed": "true", "olm.owner": "rhtpa-operator.v1.1.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-tpa", "olm.permissions.hash": "89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM", "operators.coreos.com/rhtpa-operator.tssc-tpa": "" }, "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtpa-operator.v1.1.4", "uid": "74b2987a-1625-4b4a-b7c9-cfcd6c1d6eaf" } ], "resourceVersion": "17445", "uid": "1e9a58c8-2bc1-44e5-8d82-c34d1f16425c" }, "rules": [ { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }