{ "apiVersion": "v1", "items": [ { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:08Z", "generation": 1, "name": "openshift-cloud-network-config-controller-aws", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1149", "uid": "4e450b21-f387-4e91-bc58-e30d671057c6" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "ec2:DescribeInstances", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DescribeSubnets", "ec2:DescribeNetworkInterfaces" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:11Z", "generation": 1, "name": "openshift-cloud-network-config-controller-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1222", "uid": "2b7006ae-3b3b-4b6a-9552-380423df14ca" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Compute/virtualMachines/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Network/loadBalancers/backendAddressPools/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:06Z", "generation": 1, "name": "openshift-cloud-network-config-controller-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1037", "uid": "82b39251-dce9-44a1-8015-d6095809df3d" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "compute.instances.updateNetworkInterface", "compute.subnetworks.use", "compute.subnetworks.get", "compute.zoneOperations.get", "compute.instances.get" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:12Z", "generation": 1, "name": "openshift-cloud-network-config-controller-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1317", "uid": "4b900dea-090e-4bf8-b645-c5e5cd8a1245" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:14Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1407", "uid": "927f42c6-60dd-4039-8c8f-ce429806639c" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "s3:CreateBucket", "s3:DeleteBucket", "s3:PutBucketTagging", "s3:GetBucketTagging", "s3:PutBucketPublicAccessBlock", "s3:GetBucketPublicAccessBlock", "s3:PutEncryptionConfiguration", "s3:GetEncryptionConfiguration", "s3:PutLifecycleConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:04Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "993", "uid": "3b28e56e-9209-45e7-a7e7-76000962dc10" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "dataPermissions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" ], "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/write", "Microsoft.Storage/storageAccounts/delete", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Resources/tags/write", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.Network/privateDnsZones/write", "Microsoft.Network/privateDnsZones/join/action", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/join/action" ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:07Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-gcs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1097", "uid": "9154de8d-575e-455e-a40c-56a250002163" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", "storage.buckets.list", "storage.buckets.createTagBinding", "storage.buckets.listEffectiveTags", "storage.objects.create", "storage.objects.delete", "storage.objects.get", "storage.objects.list", "resourcemanager.tagValueBindings.create", "resourcemanager.tagValues.get", "resourcemanager.tagValues.list" ], "skipServiceCheck": true }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:10Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1201", "uid": "0ef46db7-fc65-4dee-85cf-a34cc1448da2" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:13Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos-powervs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1362", "uid": "8ed36ecc-9a88-4b2c-b2c3-c83bb510e431" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudPowerVSProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:12Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1312", "uid": "8c880c5e-b5f1-4f8c-af8d-448087ee3300" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:06Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1038", "uid": "0c5c600e-9870-48a3-a1e8-6723f98a5ed5" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "elasticloadbalancing:DescribeLoadBalancers", "route53:ListHostedZones", "route53:ListTagsForResources", "route53:ChangeResourceRecordSets", "tag:GetResources", "sts:AssumeRole" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:08Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1157", "uid": "361bf29a-3627-4846-be03-3ae1d6ec7afe" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/dnsZones/A/delete", "Microsoft.Network/dnsZones/A/write", "Microsoft.Network/privateDnsZones/A/delete", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-06T12:08:11Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "cb302db4-6d56-44ce-b969-bd8f57b0ffda" } ], "resourceVersion": "1220", "uid": "3cdd1f9f-3748-4ad0-b52d-93cf18bdc1fd" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "dns.changes.create", "dns.resourceRecordSets.create", "dns.resourceRecordSets.update", "dns.resourceRecordSets.delete", "dns.resourceRecordSets.list" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }