{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:46Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "12714", "uid": "90837ca9-0814-41a4-8cc6-acf7ef6efde0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "198", "uid": "1455d292-0d56-4358-a099-e9a1012efd9d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-info" ], "resources": [ "configmaps" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "192", "uid": "958a3081-fbc1-4bdf-a02d-c93721a7a118" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "extension-apiserver-authentication" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:46Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "12726", "uid": "6cf82c0c-363d-4d05-b188-55f42ce5374d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "196", "uid": "1db8c79f-c5ee-49ff-8a89-87fb8aadde1d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-controller-manager" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "197", "uid": "cee85247-531f-40a0-abd4-1d8b2283f375" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "kube-scheduler" ], "resources": [ "configmaps" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leasecandidates" ], "verbs": [ "create", "get", "list", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "193", "uid": "634aaa15-4e61-4750-ab09-07818f1a5970" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "194", "uid": "ca085a6d-e629-4d27-9055-1518c7fc5920" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:56:47Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "195", "uid": "0eb0bf4b-112b-4437-ae10-6f368d9d7dc1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "delete", "get", "list", "watch" ] }, { "apiGroups": [ "", "events.k8s.io" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:48Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:leader-election-lock-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "1740", "uid": "3e70ba9a-36df-4331-b706-f1406db2e8eb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:27Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "748", "uid": "67f7d7f7-368d-4a3b-9c09-9b3b445df790" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:49Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1924", "uid": "0bdef651-78ce-479d-9e5e-01bffede1544" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:24Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "609", "uid": "6a7b69d7-195f-40e7-8cad-b86aa1e175ef" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:58:03Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2555", "uid": "bdd4d66f-4cf5-4455-82de-1d68932f09c0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:10Z", "name": "backplane-cee-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6677", "uid": "59de9ce3-9425-4272-b548-f606b17f2273" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:19Z", "name": "backplane-csm-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5813", "uid": "54d5a9e1-f745-4f7a-af5c-a3543de7d262" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:13Z", "name": "backplane-mcs-tier-two-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5549", "uid": "3b7a11de-fa60-4b85-bbf4-63f3bbd096e8" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:08Z", "name": "backplane-mobb-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6660", "uid": "f4e988ab-71c4-49c3-974a-32fdfe68ac62" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:15Z", "name": "backplane-srep-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5591", "uid": "b9f9eb4d-6814-4cfd-b49f-3850be63239a" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:09Z", "name": "backplane-tam-pcap-collector", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "6667", "uid": "ac945774-0a65-404b-beca-200b9309ca70" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pcap-collector-creds" ], "resources": [ "secrets" ], "verbs": [ "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:51Z", "name": "osd-delete-backplane-script-resources", "namespace": "openshift-backplane-managed-scripts", "resourceVersion": "5047", "uid": "2f6aca7b-3ecb-47eb-9968-52b48cc9300c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "serviceaccounts" ], "verbs": [ "get", "list", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:36Z", "name": "cloud-credential-operator-role", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1189", "uid": "a4d8f342-5f3c-44f4-97b9-ee3996bfe306" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "events", "serviceaccounts", "services", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "*" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:24Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "652", "uid": "9a929268-26ee-42b4-954e-96b815fbc286" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:56Z", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2334", "uid": "e2cf0015-2130-4828-9fe3-6a3d9d9f888c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:48Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1837", "uid": "3c7e8b18-653f-4be9-bbd3-55546a5f546b" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:45Z", "name": "aws-ebs-csi-driver-operator-role", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "1528", "uid": "b6971baa-89b7-481b-b74c-42d8d915edc3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps", "secrets", "persistentvolumeclaims" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "watch", "list", "get", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "get", "create", "update", "patch", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:28Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "822", "uid": "c64af073-216f-4540-88f2-2eaee142b593" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:27Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "747", "uid": "d297c040-455e-43ee-a72d-6c3205f4f14c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:34Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1096", "uid": "60e644bd-e7fb-4c94-9b91-43d751cd837c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:44Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1458", "uid": "d7aad814-e9d9-4c82-9f0f-014f7dfb9edf" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T16:07:31Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "12131", "uid": "e037e59d-484b-4ace-af11-327b295680a2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:35Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1143", "uid": "4b5fffa4-798d-4693-a3ff-21f41648dcc5" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "watch", "list", "delete", "update", "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:39Z", "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1260", "uid": "c7e8bb3b-5862-48a3-a0e9-984afba7b226" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts", "services", "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:27Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "767", "uid": "64380e26-3bbf-4432-b22f-788c3af4db17" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"include.release.openshift.io/self-managed-high-availability\":\"true\",\"kubernetes.io/description\":\"Grant access to monitor the cluster-version operator's metrics.\"},\"name\":\"prometheus-k8s\",\"namespace\":\"openshift-cluster-version\"},\"rules\":[{\"apiGroups\":[\"\"],\"resources\":[\"services\",\"endpoints\",\"pods\"],\"verbs\":[\"get\",\"list\",\"watch\"]}]}\n", "kubernetes.io/description": "Grant access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-04-27T15:57:19Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "resourceVersion": "516", "uid": "65890f22-41a8-4c51-8c9b-418e9405b457" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:32Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1061", "uid": "c87a6f01-6f3a-4d0f-8ec2-bfe22e806973" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "kube-cloud-config" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:48Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1741", "uid": "758ad099-df59-4cd9-8efe-003ba02ff7ac" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:47Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1622", "uid": "4a6e99c0-9301-4412-bbaf-7fc7c9adc666" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "create", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:47Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1716", "uid": "897b0735-a3c6-4b54-835b-422dbfc872fe" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "console-public" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:48Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1833", "uid": "07e8e2a9-291f-464f-be68-dfc437a6a47b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:31Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1016", "uid": "a662c564-1ff9-49e9-b4a2-11475e79487d" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "csr-controller-ca" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "openshift.io/description": "Can read the openshift-network-features ConfigMap values" }, "creationTimestamp": "2026-04-27T15:58:14Z", "name": "openshift-network-public-role", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "3519", "uid": "ebea44a0-66ac-4486-96a3-dcae216e424f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-network-features" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:50Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "1974", "uid": "dd7b78fb-3b43-4b1b-be42-7533901ef322" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "oauth-serving-cert" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:47Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1602", "uid": "7ce98114-ed90-450f-94c7-426b227d966b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:34Z", "name": "cloud-credential-operator-role", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1130", "uid": "159820aa-42cf-4c6f-965f-3fb1e7ba0190" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cloud-provider-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:48Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1812", "uid": "e8b08d0f-f016-4889-ba87-4493a241d5f6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-27T15:57:48Z", "name": "coreos-pull-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1721", "uid": "3849aca3-6524-4b4a-a299-1981a1d69a9d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:21Z", "name": "dedicated-admins-project-request", "namespace": "openshift-config", "resourceVersion": "5916", "uid": "c13db00e-6d29-4a4b-b207-42784e3ad181" }, "rules": [ { "apiGroups": [ "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:13Z", "name": "dedicated-admins-registry-cas-project", "namespace": "openshift-config", "resourceVersion": "5550", "uid": "81e8c864-a44c-485b-8c70-6017653d2d04" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resourceNames": [ "registry-cas" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:44Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1443", "uid": "ac8bdbc7-7ff8-47c9-a7b1-a706d12cd116" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:46Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1549", "uid": "fcaf4e47-dce0-459c-98fb-131b9a81a3a5" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pull-secret", "support" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:50Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1952", "uid": "156f2850-4da6-4c62-8596-2c74d9901d04" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "events" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "create", "update" ] }, { "apiGroups": [ "console.openshift.io" ], "resources": [ "consolenotifications" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "olmconfigs" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:58:02Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2511", "uid": "c4697659-5e0b-41d1-9bb2-e1f872607da2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:49Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1875", "uid": "740cb3e1-47c9-4470-a2ab-abca6a6ea273" }, "rules": [ { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "roles", "rolebindings" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:46Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1584", "uid": "8bdc6cca-83fc-4fbf-a87d-91e375782714" }, "rules": [ { "apiGroups": [ "console.openshift.io" ], "resources": [ "consoles" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services", "events", "configmaps", "secrets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes", "routes/custom-host" ], "verbs": [ "get", "list", "watch", "create", "update", "delete" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch", "create", "update", "delete", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:58:02Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2506", "uid": "1bd9d6c3-c6fc-4cc9-a875-bf681b9f78fc" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:27Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "750", "uid": "d9653975-bfdd-4558-a0fc-c13f8a022059" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:18Z", "name": "dedicated-admins-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "5761", "uid": "bc4defee-2ddc-4d97-91a6-90464319f144" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespaces", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "prometheuses", "prometheusrules", "servicemonitors", "podmonitors", "thanosrulers" ], "verbs": [ "*" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "alertmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "extensions", "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "pods", "replicationcontrollers", "replicationcontrollers/scale", "services" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "deployments", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests" ], "verbs": [ "*" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:18Z", "name": "prometheus-k8s-openshift-customer-monitoring", "namespace": "openshift-customer-monitoring", "resourceVersion": "5759", "uid": "f01255de-0e0b-4c2f-903b-d6a7a6be1445" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:52Z", "labels": { "olm.managed": "true" }, "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c", "uid": "b9fb71f2-14a2-4990-bfd8-61f193aa16b8" } ], "resourceVersion": "13067", "uid": "08b4e7ea-6a82-441e-9a82-b7a1577de6db" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "99b07c45bd4393a793940f31bf2887fd12a636d02cd8e5e017ce352a0db6d1c" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:08:18Z", "labels": { "olm.managed": "true", "olm.owner": "deployment-validation-operator.v0.1.595-gbf89fe8", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-deployment-validation-operator", "olm.permissions.hash": "3vL2pKeIvLo5JPkyLuA3nWCfoliMwNiwwG0HQ7", "operators.coreos.com/deployment-validation-operator.openshift-deployment-validation": "" }, "name": "deployment-validation-op-7rLkLi3Nk0YvyK9xTCUeUEoOvQKqfsPU8GLVFH", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "c3837cea-f9a4-45cc-aac6-044a574beb6f" } ], "resourceVersion": "13777", "uid": "0653fef1-b65f-463a-9309-c5a3808bc612" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "services" ], "verbs": [ "get", "create", "list", "delete", "update", "watch", "patch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:08:17Z", "labels": { "olm.managed": "true" }, "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "18fa816d-b797-4359-823c-24781d6a4254" } ], "resourceVersion": "13665", "uid": "c272a54a-9891-46ca-914c-5f15098380a9" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "deployment-validation-operator.v0.1.595-gbf89fe8" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:33Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1088", "uid": "1941234d-8dbb-4e9c-bb51-67381977fc14" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "events", "configmaps" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:31Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "985", "uid": "f51d55e6-d942-4e98-b4d4-6d443b40160d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:53Z", "name": "dedicated-admins-openshift-dns", "namespace": "openshift-dns", "resourceVersion": "5114", "uid": "71701ba1-4fa2-4044-a1a2-a7b473ad7af4" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:53Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "2264", "uid": "656c207b-6092-4ed8-af03-e88dae867e19" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:51Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19337", "uid": "ca586518-6164-4be0-a3e6-0e352fa5ab9c" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "28579", "uid": "840a1213-8bbf-4482-acd2-502bb640f558" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:49Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19060", "uid": "0b5f67dc-4144-4335-8ee4-fad83ed31364" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19146", "uid": "19ac158b-1719-44ac-8fd4-65a783413d5b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19141", "uid": "4ab0da33-f76e-4770-9a4c-384760e1b420" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:50Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19138", "uid": "81ada2bd-4a8b-4f8e-a1e7-dd6a9cba27a5" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:49Z", "name": "openshift-gitops-read", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "f8abc500-708b-4461-bbfc-fe0487d63173" } ], "resourceVersion": "19054", "uid": "a684d0e7-ce77-4985-af9e-212733c1daa6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:44Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1456", "uid": "ab225de5-eec4-42e8-9ca6-bb137a372ae3" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "replicasets", "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:47Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1624", "uid": "6e794d7a-7e16-4487-b741-953786f2707a" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "privileged" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:28Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "828", "uid": "f2aa6350-7f9d-4c79-a4d1-590899fee14a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:43Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1417", "uid": "35723968-d44b-4afd-8dab-2e1ecf93c070" }, "rules": [ { "apiGroups": [ "operator.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "services" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:58:02Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2505", "uid": "c04510bf-8e50-4a0a-871c-501dc8e4ab71" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:53Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "2268", "uid": "152f5a36-b9f9-42dd-aa5b-db462dbb8b7a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:47Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1600", "uid": "e23984db-8e49-4017-a907-354fce1899ee" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "gather" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "delete", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "replicasets" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:48Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1733", "uid": "e446eaa2-ccc8-4c51-b832-2a2e389d10ac" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "get", "watch", "list", "delete", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:53Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2218", "uid": "fdf9b50e-2198-48c7-840d-8dd831df5433" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:58:02Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "2504", "uid": "dee36b19-dbba-4753-a132-a82d173365eb" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:26Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "743", "uid": "b234ab14-f2ad-403f-b0a1-566b5bd9cdf6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:49Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1913", "uid": "0c66e05c-4501-44e9-b1f2-ac23f6fc0671" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:24Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "645", "uid": "bb03e317-a10b-483c-9744-df66488cc804" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:20Z", "name": "dedicated-admins-openshift-logging", "namespace": "openshift-logging", "resourceVersion": "5842", "uid": "c68be88d-f0ae-4832-8472-86d69900a4c5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "events", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log" ], "verbs": [ "list", "get", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "logging.openshift.io" ], "resources": [ "clusterloggings" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans" ], "verbs": [ "update" ] }, { "apiGroups": [ "" ], "resources": [ "persistentvolumeclaims" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "daemonsets" ], "verbs": [ "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:34Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1131", "uid": "e1f42211-04e5-4792-b4e0-501395b3b69c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "cluster-autoscaler-status" ], "resources": [ "configmaps" ], "verbs": [ "delete", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:26Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "734", "uid": "74ed56f8-0fa5-4818-a941-ecbb0197af3d" }, "rules": [ { "apiGroups": [ "autoscaling.openshift.io" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "services", "endpoints", "persistentvolumeclaims", "events", "configmaps", "secrets" ], "verbs": [ "*" ] }, { "apiGroups": [ "apps" ], "resources": [ "deployments", "daemonsets", "replicasets", "statefulsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "cluster.k8s.io", "machine.openshift.io" ], "resources": [ "machinedeployments", "machinesets" ], "verbs": [ "watch", "list", "get", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors", "prometheusrules" ], "verbs": [ "watch", "list", "get", "create", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "config.openshift.io" ], "resources": [ "infrastructures" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:38Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1233", "uid": "2f74bfbc-1103-4089-8156-523eb98da139" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:31Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1002", "uid": "bd4b9aeb-8d1b-46df-9b84-232faa28b90f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "namespace/metrics" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:05Z", "labels": { "olm.managed": "true" }, "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "uid": "b45b5fdb-f575-4830-9e13-7329c7d2cad2" } ], "resourceVersion": "16929", "uid": "74d00bfb-8ac9-4236-934f-09c9e8f0206c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:05Z", "labels": { "olm.managed": "true" }, "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "uid": "fd030059-3a7f-4d6d-8ab8-6a1b8c27e5c2" } ], "resourceVersion": "16892", "uid": "a6304eaa-0f51-43c0-ae32-bfe498256b9f" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:04Z", "labels": { "olm.managed": "true" }, "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "uid": "f2504892-5958-4340-90da-bb6752c4ef8e" } ], "resourceVersion": "16869", "uid": "c483ec34-22dc-4821-9f8f-85330cb4850e" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:10Z", "labels": { "olm.managed": "true" }, "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "uid": "57f24e55-9e26-41ed-b696-53fa4e988c02" } ], "resourceVersion": "17070", "uid": "7d35e293-55a4-4e46-b77a-8129b8245354" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:53Z", "name": "dedicated-admins-openshift-marketplace", "namespace": "openshift-marketplace", "resourceVersion": "5109", "uid": "648cceee-e279-4682-914a-b277456ecd4b" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "catalogsources" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:05Z", "labels": { "olm.managed": "true" }, "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "uid": "798fb55c-27b6-4c46-8356-549f4051cd72" } ], "resourceVersion": "16916", "uid": "dedb432c-459f-4ae4-a251-43355644b46b" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:05Z", "labels": { "olm.managed": "true" }, "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "uid": "673e1589-1168-427a-b235-0c04c9df8c16" } ], "resourceVersion": "16902", "uid": "ccfa8f53-66b0-4d4d-b06c-8ba11af15973" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:41Z", "name": "backplane-cee", "namespace": "openshift-monitoring", "resourceVersion": "4755", "uid": "439e9990-1cbf-4bd6-9c25-fdc8c9fdbff1" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:43Z", "name": "backplane-lpsre", "namespace": "openshift-monitoring", "resourceVersion": "6367", "uid": "20a50c99-7e03-43b2-acd3-ba815d6f9b9d" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:13Z", "name": "backplane-mcs-tier-two", "namespace": "openshift-monitoring", "resourceVersion": "5541", "uid": "bfc08461-1bab-43f4-a156-934f05c0c7c0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "pods/portforward" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-metrics-api", "namespace": "openshift-monitoring", "resourceVersion": "12644", "uid": "797fe8ec-39d0-47e0-bce3-c0cba04e2c41" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "k8s" ], "resources": [ "prometheuses/api" ], "verbs": [ "get", "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:41Z", "labels": { "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1335", "uid": "e6de33a7-70b2-4eb6-ab2e-7db87933e350" }, "rules": [ { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules", "alertrelabelconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.openshift.io" ], "resources": [ "alertingrules/finalizers", "alertingrules/status" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:49Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1933", "uid": "e7bacb42-1e4b-46c8-844e-4737ed0f0d15" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:51Z", "name": "dedicated-admins-hostedcluster-uwm", "namespace": "openshift-monitoring", "resourceVersion": "5051", "uid": "5a9f2429-0530-4e08-91ef-d9aee5c6055c" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmap" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "configmap" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-edit", "namespace": "openshift-monitoring", "resourceVersion": "12595", "uid": "3ad8e587-f31c-4e11-bca7-932adba10936" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-view", "namespace": "openshift-monitoring", "resourceVersion": "12614", "uid": "7f7ce42f-dfef-4ff6-b18b-4ca51b571990" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "main" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:47Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "12748", "uid": "704e55dd-2b26-4448-a290-ace33b822f1c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:46Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "12705", "uid": "90379c04-cb22-4755-9eae-a94293dc6b2f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:14Z", "labels": { "app.kubernetes.io/component": "segment-backup-installation", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/instance-namespace": "tssc-tas", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "segment-backup-nightly-metrics", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rhtas-segment-backup-job-tssc-tas", "namespace": "openshift-monitoring", "resourceVersion": "24396", "uid": "bde66ecf-2204-4e83-bf73-07dad3fc7509" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "cluster-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:02Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2488", "uid": "98932428-1c8a-4815-b34a-4868fd73b3a9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:59Z", "name": "whereabouts-cni", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2437", "uid": "7ce9f274-f86c-4e5f-9746-c6d222dbdf63" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:10Z", "name": "backplane-cee-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6673", "uid": "870fa14b-ca42-45a5-8868-027b44fb3f72" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:07Z", "name": "backplane-csm-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6652", "uid": "06ebc81c-e563-41fc-a32a-43245d1d9a80" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:59:45Z", "name": "backplane-lpsre-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6388", "uid": "0dadfc8f-81c0-408f-bd04-6192a76de88f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "list", "get" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "list", "get", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:05Z", "name": "backplane-mcs-tier-two-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6600", "uid": "98c143e1-5b70-4e81-a34d-36f302400249" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:08Z", "name": "backplane-mobb-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6657", "uid": "52b61200-a805-4613-b622-0c4de30f83a8" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:06Z", "name": "backplane-srep-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6606", "uid": "6b7ddd57-e841-422b-9142-b33489ee633f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:00:09Z", "name": "backplane-tam-mustgather", "namespace": "openshift-must-gather-operator", "resourceVersion": "6664", "uid": "adbc9f65-84de-4920-86d2-b1da38cf147b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create" ] }, { "apiGroups": [ "managed.openshift.io" ], "resources": [ "mustgathers" ], "verbs": [ "create", "delete" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:12Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "3211", "uid": "244e4836-839e-4304-9c45-962bc14d57b2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:14Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "3474", "uid": "084a1e38-f6dc-441d-8eba-dd3e630f3d0b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:15Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "3697", "uid": "950f68d7-a17a-4ef8-bfdb-d165befd6bf5" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:41Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1352", "uid": "58a98bf1-4f3c-44ae-9ef1-b62eabd1ab1a" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:57:01Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "472", "uid": "5599854c-6aac-4a15-b6a0-a43177667fe2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:52Z", "name": "dedicated-admins-openshift-operators", "namespace": "openshift-operators", "resourceVersion": "5103", "uid": "671d93e7-6f1c-4b39-9ddc-182967b30fff" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "installplans", "subscriptions", "clusterserviceversions" ], "verbs": [ "*" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "list", "get", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:43Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.20.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-5FrgLNMoL4i87aJPI5rSQFezftVolV0yFP3D3E", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "61d274ae-ac14-4c23-9a67-34216cdf1941" } ], "resourceVersion": "22491", "uid": "c7443c1d-3e63-49f9-96ca-576699d376de" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:45Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "61d274ae-ac14-4c23-9a67-34216cdf1941" } ], "resourceVersion": "22528", "uid": "18ef05be-8e86-41bb-8ac6-3782d07646a9" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "openshift-gitops-operator-controller-manager-service-cert" ], "resources": [ "secrets" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:41Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "18425", "uid": "6675e8be-cb30-46cd-b358-2b535a935315" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:30Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.20.2", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.20.2", "uid": "3c8e5d30-028d-4bc8-9a18-bfc870be4d55" } ], "resourceVersion": "17896", "uid": "5b8a1fb1-0539-403d-a381-ea479df9a779" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-gitops-operator.v1.20.2" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:45Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-read", "namespace": "openshift-operators", "resourceVersion": "18742", "uid": "83595460-fa4a-41cc-a617-33b800b320fa" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:44Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v1.21.1", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v1.21.1", "uid": "8e39ac9b-7ded-40aa-899a-5bb0c500cfbd" } ], "resourceVersion": "18579", "uid": "35751c8f-3514-4dfa-a468-97365e62de2b" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "openshift-pipelines-operator-rh.v1.21.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:53Z", "labels": { "olm.managed": "true" }, "name": "rhdh-operator.v1.9.3", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhdh-operator.v1.9.3", "uid": "e9514ca4-6324-4321-9089-864bbc1c7031" } ], "resourceVersion": "19500", "uid": "a19e388f-c917-461d-95c1-8d89b3ef5492" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhdh-operator.v1.9.3" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:54Z", "labels": { "olm.managed": "true", "olm.owner": "rhdh-operator.v1.9.3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhdh.openshift-operators": "" }, "name": "rhdh-operator.v1.9.3-rhd-8DSjXahW9xiG1gZ5ND4A5s0zLrishtwqU7tiCN", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhdh-operator.v1.9.3", "uid": "9ba05a01-b92f-4b4e-9347-07f935164a7a" } ], "resourceVersion": "22925", "uid": "72d4f333-2fec-4f66-82da-ad44c9d8837f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:21Z", "labels": { "olm.managed": "true" }, "name": "rhtas-operator.v1.3.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtas-operator.v1.3.4", "uid": "ac164c33-141f-4955-a4da-49ad8e00a3b0" } ], "resourceVersion": "17375", "uid": "2447465f-a00b-4f29-8ed1-3ef538d1ed72" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtas-operator.v1.3.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:28Z", "labels": { "olm.managed": "true", "olm.owner": "rhtas-operator.v1.3.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp", "operators.coreos.com/rhtas-operator.openshift-operators": "" }, "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtas-operator.v1.3.4", "uid": "8b97dfc7-d49c-4293-9df0-7e5d1c9bdc01" } ], "resourceVersion": "22295", "uid": "ae1dea3a-9de4-4ad5-bb61-5c80c99b436b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:49Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "19005", "uid": "fffdaca2-9eb0-467f-8f05-5123a7bfe950" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-operator-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:07Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2740", "uid": "4fa6c43e-cfa7-4bdd-a4dc-58af00bc16b6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "create", "update", "patch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:05Z", "name": "openshift-ovn-kubernetes-node-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2681", "uid": "a670bdd9-e865-4eff-9957-caf3c13ed692" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "list", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:10Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "7eda2e2a-a690-4d57-9c43-b7286cd09881" } ], "resourceVersion": "2816", "uid": "db67c422-7fb0-41a3-b807-ca726ed1183f" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "fcfb90bb6720991d99870a65a037f9fd4b94a8c008e438e4ddf9d8b108dfeb13" }, "creationTimestamp": "2026-04-27T16:21:42Z", "name": "openshift-pipelines-read", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-post-49frz", "uid": "17021ca7-9ee3-42ce-a1aa-a329ecf9160a" } ], "resourceVersion": "26470", "uid": "db2a1ae1-8926-4572-867e-174f8a4c5979" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "66e536c350b71a4e13c74a1bf8ecba35fc04fc70223efa5a8458ac25154f9acc" }, "creationTimestamp": "2026-04-27T16:23:03Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-k6fd9", "uid": "8dcedd32-8073-4c71-b5c8-7c09e4fe7926" } ], "resourceVersion": "28581", "uid": "797e4934-c90b-4adb-8b90-cf1669e1ad85" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "a304d397c7ed93bdc28595b442b57f5672bd03d4f622a9d4869a50f187bf8087" }, "creationTimestamp": "2026-04-27T16:23:03Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-k6fd9", "uid": "8dcedd32-8073-4c71-b5c8-7c09e4fe7926" } ], "resourceVersion": "28571", "uid": "e8b30fa0-36a1-406b-82b4-a032b97e8ccc" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "06d111951d51268cb800ca5cb17e7f48f3e7a1a7721bb3f09b721a4c6c76ed60" }, "creationTimestamp": "2026-04-27T16:23:04Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-monitoring", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-k6fd9", "uid": "8dcedd32-8073-4c71-b5c8-7c09e4fe7926" } ], "resourceVersion": "28613", "uid": "87686d44-6cfb-40c0-9b09-414233cedf81" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "d0c77db2522de8bd87833caa1285b60cef93dccf97bb46289424368f4d7aa227" }, "creationTimestamp": "2026-04-27T16:23:03Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-k6fd9", "uid": "8dcedd32-8073-4c71-b5c8-7c09e4fe7926" } ], "resourceVersion": "28591", "uid": "36360207-9903-47ff-9260-3527a8dd0529" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "588cd1aff9b279021538b93be6a214ecd6f51f305440a66c2febe9f2ebede848" }, "creationTimestamp": "2026-04-27T16:23:03Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-k6fd9", "uid": "8dcedd32-8073-4c71-b5c8-7c09e4fe7926" } ], "resourceVersion": "28597", "uid": "88301786-9b8b-46d2-9197-3388182d42a0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "038b63a2d828267cc22091593bb99eb1e54e50a16a470ea95edade3d49c53582" }, "creationTimestamp": "2026-04-27T16:22:04Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-xx7hm", "uid": "2e6814f6-1518-4fdf-b8f6-e732917c700a" } ], "resourceVersion": "27047", "uid": "36109a6e-d7ee-46a1-a188-6bd812e62a35" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "chains-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "efa66d21c0c3389635d0ef793c6842fe7534b04798563aba288f485dfd5bd336" }, "creationTimestamp": "2026-04-27T16:22:04Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains" }, "name": "tekton-chains-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-xx7hm", "uid": "2e6814f6-1518-4fdf-b8f6-e732917c700a" } ], "resourceVersion": "27045", "uid": "36727e45-6a66-4527-b301-f86a1196fb93" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "dd36537d219a2b58c612f9b9ddd334e69a783a938beb0b6d7230874559a83179" }, "creationTimestamp": "2026-04-27T16:22:46Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-default-openshift-pipelines-view", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-wlzfp", "uid": "1e4da8fe-9676-47d1-b297-775605ace67f" } ], "resourceVersion": "28199", "uid": "b72bfe23-e036-426d-9527-0d0b140a3a22" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "deployments" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"9d90ea03620c49973f9cadc32394769fec8470e0178f640539064f314cdc80fe\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-stepaction-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolverstepactions-1.21-grj24\",\"uid\":\"4edf7abb-4186-4b73-a2a5-0bd92f4bd094\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"stepactions\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "9d90ea03620c49973f9cadc32394769fec8470e0178f640539064f314cdc80fe" }, "creationTimestamp": "2026-04-27T16:22:45Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-stepaction-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolverstepactions-1.21-grj24", "uid": "4edf7abb-4186-4b73-a2a5-0bd92f4bd094" } ], "resourceVersion": "28354", "uid": "a64ebfce-4288-4e13-b2b5-6ba2e032ef29" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "stepactions" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"Role\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"db9d5141afdd7538cabfa9af025ccf6ccacd8875906522e9d3a4618d0fa1eba7\"},\"labels\":{\"operator.tekton.dev/operand-name\":\"openshift-pipelines-addons\"},\"name\":\"tekton-ecosystem-task-list-role\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolvertasks-1.21-mxdqx\",\"uid\":\"c6f21ae5-49aa-4b07-9fe0-588995dbbf24\"}]},\"rules\":[{\"apiGroups\":[\"tekton.dev\"],\"resources\":[\"tasks\"],\"verbs\":[\"get\",\"list\"]}]}\n", "operator.tekton.dev/last-applied-hash": "db9d5141afdd7538cabfa9af025ccf6ccacd8875906522e9d3a4618d0fa1eba7" }, "creationTimestamp": "2026-04-27T16:22:43Z", "labels": { "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tekton-ecosystem-task-list-role", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolvertasks-1.21-mxdqx", "uid": "c6f21ae5-49aa-4b07-9fe0-588995dbbf24" } ], "resourceVersion": "28340", "uid": "2a5f569e-d7e0-47bf-8d2e-e6cfb645bdc2" }, "rules": [ { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "dea966709e98f2ed170e831de1a811ce59bdbd48723afbe2f27d462e9bac960f" }, "creationTimestamp": "2026-04-27T16:21:23Z", "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-operators-proxy-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25963", "uid": "e46a5fb4-b25c-4fb3-b826-53145743ca84" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "953feeedc94bc91146d6c5e5b10fac2cdcef2cda06054718654b2a4d42605575" }, "creationTimestamp": "2026-04-27T16:21:20Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25840", "uid": "894fcceb-93df-43f5-b06a-5903d350d2ca" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-controller", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "9c20757a48b5b135f4c7987baba6c635927f93d66cbef87cd050a297fc4b451a" }, "creationTimestamp": "2026-04-27T16:21:20Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25846", "uid": "e3fc67e4-3237-455c-9e61-33970f3d633b" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "feature-flags", "config-leader-election-events", "config-registry-cert" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "1d857f425382c40248940693528c61ba007df06ebe49e3676874bfc5f3a21827" }, "creationTimestamp": "2026-04-27T16:21:20Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25854", "uid": "42ee3425-4d36-404b-bf2f-a57fbc239ff6" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "c358076530ca2e11e84276a61766f26f380cc436fe4677a2674b4cabcb49b7a8" }, "creationTimestamp": "2026-04-27T16:21:20Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-leader-election", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25847", "uid": "07b8f43a-7977-44c0-bdec-64b101fe25be" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "e638d1a4f2f0eac872d5638776e6d7f4c6255d0cf1be6c24b9e694571d0c5055" }, "creationTimestamp": "2026-04-27T16:21:22Z", "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-resolvers-namespace-rbac", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25918", "uid": "d55ae71b-a82d-4719-8a17-88e7562309c0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps", "secrets" ], "verbs": [ "get", "list", "update", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "389b3023010b64d9b6a6966b5ad981baa235bb22f87e7e48cc5dafe2a8e50814" }, "creationTimestamp": "2026-04-27T16:21:20Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines", "operator.tekton.dev/operand-name": "tektoncd-pipelines" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-6v929", "uid": "de77bed8-2f90-4ccb-8b11-5433f29d1cf8" } ], "resourceVersion": "25843", "uid": "5a5e7903-af52-40f0-ba35-56e46c3571ae" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "config-logging", "config-observability", "config-leader-election-webhook", "feature-flags" ], "resources": [ "configmaps" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "list", "watch" ] }, { "apiGroups": [ "" ], "resourceNames": [ "webhook-certs" ], "resources": [ "secrets" ], "verbs": [ "get", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "2b7171e6a494f2176dad13f19663afdc19cc0abb16ff90c02d4d03bce9289236" }, "creationTimestamp": "2026-04-27T16:22:10Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-nlcwd", "uid": "8f732a05-8a3e-4b7d-908c-753985cf9ccc" } ], "resourceVersion": "27273", "uid": "36cb7e1a-ed59-4ad7-b009-c774f8d02fac" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "tekton-results-info" ], "resources": [ "configmaps" ], "verbs": [ "get", "describe" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "d63755b9da21fa48a00a0257882eba1d362a900dc1c721a06bf826294124c731" }, "creationTimestamp": "2026-04-27T16:21:44Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-admin-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-z5gbh", "uid": "3b36bda5-bf85-41c9-b34b-1b3325c83410" } ], "resourceVersion": "26563", "uid": "8fcd34de-ad21-4a67-8fb2-08d719d97192" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "create", "update", "delete", "patch", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "3b0ba9abd50b5be17197e3aed441d274de3655e67026b0f1eed254eb1b75ecf8" }, "creationTimestamp": "2026-04-27T16:21:44Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-z5gbh", "uid": "3b36bda5-bf85-41c9-b34b-1b3325c83410" } ], "resourceVersion": "26568", "uid": "258a41cb-5926-4f1c-9b2f-0615370a5fe2" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "261d64b7cc53d3348d161f39187583dfc9a45ca2ae5fd51f75b5d66a9c68944f" }, "creationTimestamp": "2026-04-27T16:21:44Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers", "operator.tekton.dev/operand-name": "tektoncd-triggers" }, "name": "tekton-triggers-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-z5gbh", "uid": "3b36bda5-bf85-41c9-b34b-1b3325c83410" } ], "resourceVersion": "26571", "uid": "8afacc5c-6312-4bbe-9ae6-c573e0cbe7be" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "triggers-info" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:57:48Z", "labels": { "hypershift.openshift.io/managed": "true" }, "name": "openshift-route-controllers", "namespace": "openshift-route-controller-manager", "resourceVersion": "1722", "uid": "79c49f05-9654-4742-8703-c3f7dfd473d3" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resourceNames": [ "openshift-route-controllers" ], "resources": [ "leases" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T15:57:31Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "990", "uid": "2163c58a-25e4-4b3e-bde2-266a2c4a6fe6" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:06:16Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "9199", "uid": "b831e036-9353-4e20-b0ff-d684c0439338" }, "rules": [ { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "update", "create" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "replicasets", "deployments" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:42Z", "name": "dedicated-admins-user-workload-monitoring-create-cm", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "4795", "uid": "74eedd33-9d32-424f-aaa9-637cb5939d55" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T15:58:42Z", "name": "dedicated-admins-user-workload-monitoring-manage-am-secret", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "4798", "uid": "8b66efb3-879b-496a-9fcc-6d64f2698a54" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "alertmanager-user-workload" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-reader", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12576", "uid": "af462884-7bc4-4477-84dd-70c686c0b5cb" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-alertmanager-api-writer", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12588", "uid": "08528a93-82aa-4b2d-ae0f-ed64c153e1b8" }, "rules": [ { "apiGroups": [ "monitoring.coreos.com" ], "resourceNames": [ "user-workload" ], "resources": [ "alertmanagers/api" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:47Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12749", "uid": "a1d48ad7-9307-4feb-9c7c-bd634894683c" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "services", "endpoints", "pods" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:07:45Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "user-workload-monitoring-config-edit", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "12555", "uid": "0b705456-41e6-4d8b-a995-65b591d79ede" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "user-workload-monitoring-config" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "patch", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:57:50Z", "name": "copied-csv-viewer", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f3714f9e-20b7-4796-995f-fc8f01ccb8e8" } ], "resourceVersion": "1955", "uid": "39546d8f-658b-40ea-a9fa-0d45bafe1dbf" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "0ce3f607230ac970fcffa9563cc5bf188999103a0b5f5eabcfb3cd3ad9dcaf38" }, "creationTimestamp": "2026-04-27T16:23:21Z", "labels": { "app.kubernetes.io/part-of": "pipelines-as-code" }, "name": "pipelines-as-code-templates", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-post-vgrzh", "uid": "08247438-04cf-4c30-b1af-c6b339eb9c07" } ], "resourceVersion": "29274", "uid": "ed4b4225-601c-42c0-a15c-23138562e9ff" }, "rules": [ { "apiGroups": [ "" ], "resourceNames": [ "pipelines-as-code-go-template", "pipelines-as-code-java-template", "pipelines-as-code-nodejs-template", "pipelines-as-code-python-template" ], "resources": [ "configmaps" ], "verbs": [ "get", "list" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-27T15:57:01Z", "name": "shared-resource-viewer", "namespace": "openshift", "resourceVersion": "467", "uid": "6db5d6fa-4747-4e87-aec4-542aebc2e643" }, "rules": [ { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:27Z", "labels": { "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "rhbk-operator", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp", "operators.coreos.com/rhbk-operator.rhbk-operator": "" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "4791a9b3-14df-4497-b37b-ecfacce46cf9" } ], "resourceVersion": "18555", "uid": "2606c17f-7ac5-4597-96de-047814d5372d" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:25Z", "labels": { "olm.managed": "true" }, "name": "rhbk-operator.v26.4.11-opr.1", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "be840ed7-05cd-447b-8d7f-9fe129e6011e" } ], "resourceVersion": "17573", "uid": "de699cab-ea6c-47cb-82ca-feb1e0af5742" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhbk-operator.v26.4.11-opr.1" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:10Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-ci", "resourceVersion": "28864", "uid": "1d563ad6-0fd4-4d86-ae3f-adb14960420f" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:10Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-ci", "resourceVersion": "28885", "uid": "d1c0a8b9-0160-4438-8ae7-507cfb4b14b9" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:10Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-development", "resourceVersion": "28843", "uid": "f377d181-22ad-4900-adc1-885e7d1e06de" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:10Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-development", "resourceVersion": "28881", "uid": "7beac405-c1be-4cb4-b18a-1cb90eb9ba39" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-prod", "resourceVersion": "29024", "uid": "d56fc03b-19e6-49e7-b9af-da8539a9ee9e" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-prod", "resourceVersion": "29032", "uid": "48f7fbaf-dc53-4617-aba4-e0fdc8713423" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-stage", "resourceVersion": "29028", "uid": "58851185-a0d6-44b3-b04a-fc5f01505e18" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:23:11Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-stage", "resourceVersion": "29033", "uid": "dba31428-a90c-43b1-a1f8-093e28f0bddd" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:06Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "21082", "uid": "d761101d-b556-4260-8727-0bb2ca3210d7" }, "rules": [ { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "applicationsets/finalizers" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets/status" ], "verbs": [ "get", "patch", "update" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "create", "update", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps", "extensions" ], "resources": [ "deployments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "28587", "uid": "b75aeec7-b3ca-4b1e-823a-246c9f004a13" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "*" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects", "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "subscriptions" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions" ], "verbs": [ "delete" ] }, { "apiGroups": [ "operators.coreos.com" ], "resources": [ "clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "packages.operators.coreos.com" ], "resources": [ "packagemanifests", "packagemanifests/icon" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "pipelinesascode.tekton.dev" ], "resources": [ "repositories" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "helm.openshift.io" ], "resources": [ "projecthelmchartrepositories" ], "verbs": [ "get", "list", "update", "create", "watch", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "serviceaccounts" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreams/secrets", "imagestreamtags", "imagetags" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimports" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get", "update" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "pods/attach", "pods/exec", "pods/portforward", "pods/proxy", "secrets", "services/proxy" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts" ], "verbs": [ "impersonate" ] }, { "apiGroups": [ "" ], "resources": [ "pods", "pods/attach", "pods/exec", "pods/portforward", "pods/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods/eviction" ], "verbs": [ "create" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "events", "persistentvolumeclaims", "replicationcontrollers", "replicationcontrollers/scale", "secrets", "serviceaccounts", "services", "services/proxy" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "serviceaccounts/token" ], "verbs": [ "create" ] }, { "apiGroups": [ "apps" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "replicasets", "replicasets/scale", "statefulsets", "statefulsets/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "jobs" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "deployments", "deployments/rollback", "deployments/scale", "ingresses", "networkpolicies", "replicasets", "replicasets/scale", "replicationcontrollers/scale" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "patch", "update" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "metrics.k8s.io" ], "resources": [ "pods", "nodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/details" ], "verbs": [ "update" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds" ], "verbs": [ "get" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "builds/log" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs/instantiate", "buildconfigs/instantiatebinary", "builds/clone" ], "verbs": [ "create" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "edit", "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigrollbacks", "deploymentconfigs/instantiate", "deploymentconfigs/rollback" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs/log", "deploymentconfigs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "quota.openshift.io" ], "resources": [ "appliedclusterresourcequotas" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/custom-host" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "resourcequotausages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "gateways" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete", "deletecollection" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs", "summary" ], "verbs": [ "get", "list" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "create", "update", "patch", "delete" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysisruns.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysisruns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "analysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "analysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applications.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "applicationsets.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applicationsets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "appprojects.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "appprojects" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "argocds.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "argocds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "backstages.rhdh.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhdh.redhat.com" ], "resources": [ "backstages" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "clusteranalysistemplates.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "clusteranalysistemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "ctlogs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "ctlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "experiments.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "fulcios.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "gitopsservices.pipelines.openshift.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "imageupdaters.argocd-image-updater.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloakrealmimports.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "keycloaks.k8s.keycloak.org" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "manualapprovalgates.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "namespacemanagements.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "notificationsconfigurations.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "k8s.ovn.org" ], "resources": [ "userdefinednetworks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "openshiftpipelinesascodes.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreamimages", "imagestreammappings", "imagestreams", "imagestreamtags", "imagetags" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "image.openshift.io" ], "resources": [ "imagestreams/layers" ], "verbs": [ "get" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rekors.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rolloutmanagers.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "rollouts.argoproj.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "securesigns.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps", "endpoints", "persistentvolumeclaims", "persistentvolumeclaims/status", "pods", "replicationcontrollers", "replicationcontrollers/scale", "serviceaccounts", "services", "services/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "bindings", "events", "limitranges", "namespaces/status", "pods/log", "pods/status", "replicationcontrollers/status", "resourcequotas", "resourcequotas/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "namespaces" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "discovery.k8s.io" ], "resources": [ "endpointslices" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "controllerrevisions", "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "replicasets", "replicasets/scale", "replicasets/status", "statefulsets", "statefulsets/scale", "statefulsets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "autoscaling" ], "resources": [ "horizontalpodautoscalers", "horizontalpodautoscalers/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "batch" ], "resources": [ "cronjobs", "cronjobs/status", "jobs", "jobs/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "extensions" ], "resources": [ "daemonsets", "daemonsets/status", "deployments", "deployments/scale", "deployments/status", "ingresses", "ingresses/status", "networkpolicies", "replicasets", "replicasets/scale", "replicasets/status", "replicationcontrollers/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "policy" ], "resources": [ "poddisruptionbudgets", "poddisruptionbudgets/status" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses", "ingresses/status", "networkpolicies" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "snapshot.storage.k8s.io" ], "resources": [ "volumesnapshots" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildconfigs", "buildconfigs/webhooks", "builds" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "view" ] }, { "apiGroups": [ "", "apps.openshift.io" ], "resources": [ "deploymentconfigs", "deploymentconfigs/scale" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "template.openshift.io" ], "resources": [ "processedtemplates", "templateconfigs", "templateinstances", "templates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "", "build.openshift.io" ], "resources": [ "buildlogs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "gateway.networking.k8s.io" ], "resources": [ "httproutes", "grpcroutes" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "tasks", "taskruns", "pipelines", "pipelineruns", "runs", "customruns", "stepactions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "tekton.dev" ], "resources": [ "clustertasks" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "route.openshift.io" ], "resourceNames": [ "tekton-results-api-service" ], "resources": [ "routes" ], "verbs": [ "get" ] }, { "apiGroups": [ "triggers.tekton.dev" ], "resources": [ "clustertriggerbindings", "clusterinterceptors", "eventlisteners", "interceptors", "triggers", "triggerbindings", "triggertemplates" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonaddons.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonchains.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonconfigs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonhubs.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektoninstallersets.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpipelines.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonpruners.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektonresults.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tektontriggers.operator.tekton.dev" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "timestampauthorities.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trillians.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "trustedprofileanalyzers.rhtpa.io" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "apiextensions.k8s.io" ], "resourceNames": [ "tufs.rhtas.redhat.com" ], "resources": [ "customresourcedefinitions" ], "verbs": [ "get" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "experiments" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "fulcios" ], "verbs": [ "*" ] }, { "apiGroups": [ "pipelines.openshift.io" ], "resources": [ "gitopsservices" ], "verbs": [ "*" ] }, { "apiGroups": [ "argocd-image-updater.argoproj.io" ], "resources": [ "imageupdaters" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "manualapprovalgates" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "namespacemanagements" ], "verbs": [ "*" ] }, { "apiGroups": [ "k8s.cni.cncf.io" ], "resources": [ "network-attachment-definitions" ], "verbs": [ "watch", "list", "get" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "notificationsconfigurations" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "openshiftpipelinesascodes" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "rbac.authorization.k8s.io" ], "resources": [ "rolebindings", "roles" ], "verbs": [ "create", "delete", "deletecollection", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "localresourceaccessreviews", "localsubjectaccessreviews", "subjectrulesreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "authorization.k8s.io" ], "resources": [ "localsubjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "resourceaccessreviews", "subjectaccessreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "rekors" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rolloutmanagers" ], "verbs": [ "*" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "rollouts" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "securesigns" ], "verbs": [ "*" ] }, { "apiGroups": [ "", "security.openshift.io" ], "resources": [ "podsecuritypolicyreviews", "podsecuritypolicyselfsubjectreviews", "podsecuritypolicysubjectreviews" ], "verbs": [ "create" ] }, { "apiGroups": [ "", "authorization.openshift.io" ], "resources": [ "rolebindingrestrictions" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "build.openshift.io" ], "resources": [ "jenkins" ], "verbs": [ "admin", "edit", "view" ] }, { "apiGroups": [ "", "project.openshift.io" ], "resources": [ "projects" ], "verbs": [ "delete", "get", "patch", "update" ] }, { "apiGroups": [ "", "route.openshift.io" ], "resources": [ "routes/status" ], "verbs": [ "update" ] }, { "apiGroups": [ "results.tekton.dev" ], "resources": [ "results", "records", "logs" ], "verbs": [ "create", "update", "get", "list", "delete" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonaddons" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonchains" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonconfigs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonhubs" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektoninstallersets" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpipelines" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonpruners" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektonresults" ], "verbs": [ "*" ] }, { "apiGroups": [ "operator.tekton.dev" ], "resources": [ "tektontriggers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "timestampauthorities" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "trillians" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtpa.io" ], "resources": [ "trustedprofileanalyzers" ], "verbs": [ "*" ] }, { "apiGroups": [ "rhtas.redhat.com" ], "resources": [ "tufs" ], "verbs": [ "*" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "20844", "uid": "3d5691bc-af9a-4793-af59-1266034bf7a9" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "20891", "uid": "f1b4e238-3eac-4aac-b6fc-73894ea811f5" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "20889", "uid": "08a7c80b-e6ff-4959-81f7-327cbc4412f0" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints" ], "verbs": [ "get" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "security.openshift.io" ], "resourceNames": [ "restricted-v2" ], "resources": [ "securitycontextconstraints" ], "verbs": [ "use" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "tssc-gitops", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "20885", "uid": "c832d9c9-3bdc-4604-8cc8-32423bc15617" }, "rules": [ { "apiGroups": [ "*" ], "resources": [ "*" ], "verbs": [ "get", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "configmaps" ], "verbs": [ "create", "get", "list", "watch", "update", "patch", "delete" ] }, { "apiGroups": [ "argoproj.io" ], "resources": [ "applications", "applicationsets", "appprojects" ], "verbs": [ "create", "get", "list", "watch", "update", "delete", "patch" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "list" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs", "cronjobs", "cronjobs/finalizers" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:17:04Z", "name": "tssc-gitops-read", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "d26a6c76-0fe8-4573-8f46-e7d4a166606a" } ], "resourceVersion": "20826", "uid": "6af224ec-8759-4fde-a8c4-8650824b4076" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "endpoints", "services", "pods" ], "verbs": [ "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:27Z", "labels": { "olm.copiedFrom": "rhbk-operator", "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-keycloak", "olm.permissions.hash": "4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "638df433-153a-4adc-aadb-ec6a6b14472b" } ], "resourceVersion": "17686", "uid": "31f2f60d-f7bd-4e8c-99bc-1bdbe19e1712" }, "rules": [ { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets", "services" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "" ], "resources": [ "pods" ], "verbs": [ "list" ] }, { "apiGroups": [ "" ], "resources": [ "pods/log" ], "verbs": [ "get" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "get", "list", "watch", "create", "delete", "patch", "update" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloakrealmimports", "keycloakrealmimports/status", "keycloakrealmimports/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "delete", "get", "list", "patch", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "k8s.keycloak.org" ], "resources": [ "keycloaks", "keycloaks/status", "keycloaks/finalizers" ], "verbs": [ "get", "list", "watch", "patch", "update", "create", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "services" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "monitoring.coreos.com" ], "resources": [ "servicemonitors" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "networkpolicies" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "apps" ], "resources": [ "statefulsets" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "delete", "get", "list", "patch", "update", "watch" ] }, { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "delete", "get", "list", "watch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:15Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "ctlog-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "CTlog", "name": "trusted-artifact-signer", "uid": "bdb7de1c-5ae4-44bf-9e79-36be14958d6c" } ], "resourceVersion": "24510", "uid": "639666a6-6953-41d9-b21e-d4bb035b96be" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:16Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rekor-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Rekor", "name": "trusted-artifact-signer", "uid": "88a656e5-9f21-4f1f-bd02-73789a525934" } ], "resourceVersion": "24580", "uid": "7604e2a6-248a-4c36-bd3c-0526e78108d3" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:20:15Z", "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "trillian-logsigner", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Trillian", "name": "trusted-artifact-signer", "uid": "3c843cce-e188-4c35-b724-3095252ef643" } ], "resourceVersion": "24449", "uid": "a350e52d-9739-421c-b0f9-6baebfc88194" }, "rules": [ { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "create", "get", "update", "watch", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:21:40Z", "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf-repository-init", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "tuf-repository-init", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuf", "name": "trusted-artifact-signer", "uid": "0fe2e3bd-5789-42fb-a721-b89fa3d47844" } ], "resourceVersion": "26402", "uid": "c8123f8a-c88e-4e29-b94b-60711877a5af" }, "rules": [ { "apiGroups": [ "" ], "resources": [ "secrets" ], "verbs": [ "create", "update" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:14Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator.v1.1.4", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtpa-operator.v1.1.4", "uid": "468036b8-253d-408f-87d2-7b6192c5cf63" } ], "resourceVersion": "17190", "uid": "83b6aa61-6de0-4057-8722-342ffe1845c0" }, "rules": [ { "apiGroups": [ "operators.coreos.com" ], "resourceNames": [ "rhtpa-operator.v1.1.4" ], "resources": [ "operatorconditions" ], "verbs": [ "get", "update", "patch" ] } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "Role", "metadata": { "creationTimestamp": "2026-04-27T16:16:16Z", "labels": { "olm.managed": "true", "olm.owner": "rhtpa-operator.v1.1.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-tpa", "olm.permissions.hash": "89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM", "operators.coreos.com/rhtpa-operator.tssc-tpa": "" }, "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtpa-operator.v1.1.4", "uid": "db700749-151e-4804-bde0-34a2ecefbfc5" } ], "resourceVersion": "17369", "uid": "c9fd8b72-6d33-4cb6-8c93-b3aec44fe771" }, "rules": [ { "apiGroups": [ "networking.k8s.io" ], "resources": [ "ingresses" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "batch" ], "resources": [ "jobs" ], "verbs": [ "create", "get", "list", "watch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "configmaps" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "coordination.k8s.io" ], "resources": [ "leases" ], "verbs": [ "get", "list", "watch", "create", "update", "patch", "delete" ] }, { "apiGroups": [ "" ], "resources": [ "events" ], "verbs": [ "create", "patch" ] } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }