{ "apiVersion": "v1", "items": [ { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:09Z", "name": "machine-config-controller-events", "namespace": "default", "resourceVersion": "10056", "uid": "d68ee107-55d0-46f9-875f-c9de69ab09be" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-controller-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:35Z", "name": "machine-config-daemon-events", "namespace": "default", "resourceVersion": "8926", "uid": "bf590f18-c75b-4230-85c5-b64a8f320b47" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-daemon-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:44Z", "name": "machine-os-builder-events", "namespace": "default", "resourceVersion": "11880", "uid": "2cfef310-d7bd-4279-8681-e5421a2af513" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-os-builder-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:17Z", "name": "openshift-pipelines-edit", "namespace": "default", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51659", "uid": "d604cc87-ad19-4a22-8939-2f5fba75e5fd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:17Z", "name": "pipelines-scc-rolebinding", "namespace": "default", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51654", "uid": "593d47d5-a2c5-4bb1-9027-0ca200f652b4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:34:59Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "default", "resourceVersion": "23964", "uid": "619b141b-33de-45b1-9925-dac31a1f6067" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:deployers", "namespace": "default", "resourceVersion": "20718", "uid": "40c383e7-5f3f-4944-a4e6-5a0490bfe728" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-builders", "namespace": "default", "resourceVersion": "20801", "uid": "2b9f28cf-96e6-454d-9e48-5f7172480e14" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-pullers", "namespace": "default", "resourceVersion": "20767", "uid": "2cdb7530-a7ed-44b6-bbe9-2bca1d05acd0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:default" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:deployers", "namespace": "kube-node-lease", "resourceVersion": "20716", "uid": "ce6aa240-07a6-4c4a-9842-985fe9635621" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-builders", "namespace": "kube-node-lease", "resourceVersion": "20799", "uid": "43bbc5d7-4567-41d4-a352-f1298a7fb771" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-pullers", "namespace": "kube-node-lease", "resourceVersion": "20825", "uid": "661b3598-d8d6-47f2-bdbd-29810fd3ba51" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-node-lease" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:12Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-public", "resourceVersion": "257", "uid": "6628e424-03e5-473c-952d-2f74070610e6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:bootstrap-signer" }, "subjects": [ { "kind": "ServiceAccount", "name": "bootstrap-signer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:deployers", "namespace": "kube-public", "resourceVersion": "20790", "uid": "44c32709-9ee0-4abf-8786-130b47d131f7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:24Z", "name": "system:image-builders", "namespace": "kube-public", "resourceVersion": "20695", "uid": "f0b99361-39cc-4e3f-bba0-940b4e83202a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:24Z", "name": "system:image-pullers", "namespace": "kube-public", "resourceVersion": "20680", "uid": "22e2b8a9-5108-4bf3-a5b8-1b7660bfc1a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-public" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:13Z", "name": "authentication-reader-for-authenticated-users", "namespace": "kube-system", "resourceVersion": "7460", "uid": "b41d29e8-a183-493a-99ac-bfabdc221a8a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:15Z", "name": "cloud-controller-manager", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3046", "uid": "32b80f94-122a-4bf7-9530-275825ca3a0d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:16Z", "name": "cloud-controller-manager:apiserver-authentication-reader", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3089", "uid": "fcc7f6bb-09ee-4482-9455-ac9aa7de8e5e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:12Z", "name": "cluster-cloud-controller-manager", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3021", "uid": "42b5d1b7-f993-40c5-a709-04551c57f461" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:48Z", "name": "console", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2653", "uid": "45d3c425-3e44-4970-bd3a-390fcafb77aa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "console-operator", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2628", "uid": "3acb1aa4-f7a1-47c6-a4f4-bca5c87ebe7d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:27Z", "name": "csi-snapshot-controller-operator-authentication-reader", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1618", "uid": "ffe25c9d-7fe9-4e6d-8c40-358a97827e2b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller-operator", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:17Z", "name": "insights-operator-auth", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1146", "uid": "889ccd70-5574-4a07-80ba-b14d6673449f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:25Z", "name": "marketplace-operator-auth-reader", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1431", "uid": "61b7c039-e7eb-4caa-a8d3-a5a972b16a8c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "marketplace-operator", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:29:35Z", "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "metrics-server-auth-reader", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "metrics-server-auth-reader", "namespace": "kube-system", "resourceVersion": "16906", "uid": "70bd2590-b542-4e11-81af-fff653c61176" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "metrics-server", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:46Z", "name": "network-diagnostics", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4405", "uid": "3b4a3714-1e7c-42ad-94cf-59d6038006cb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:56:32Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-registration:agent", "namespace": "kube-system", "resourceVersion": "39767", "uid": "a80577bd-a868-482e-afef-1fe451f53eba" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet:extension-apiserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:56:32Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-work:agent", "namespace": "kube-system", "resourceVersion": "39775", "uid": "3de46f6e-6009-4df0-abc9-54ca74a6b444" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet:extension-apiserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:00Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-controller-manager-service-auth-reader", "namespace": "kube-system", "resourceVersion": "44984", "uid": "a38d3041-68b3-4889-a06e-46be5af68353" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-operator-controller-manager", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:10Z", "labels": { "olm.managed": "true" }, "name": "packageserver-service-auth-reader", "namespace": "kube-system", "resourceVersion": "10226", "uid": "fcddcc45-c407-470c-8a8f-ae5acba14482" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:34:59Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "kube-system", "resourceVersion": "23983", "uid": "1d9b7ea1-19ab-4b3c-b234-74193a85bae0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:11Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::extension-apiserver-authentication-reader", "namespace": "kube-system", "resourceVersion": "246", "uid": "3a378f1b-3fc1-4fb1-a48e-46632a13ad17" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" }, { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:11Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "247", "uid": "b482b240-f3f8-480d-b6a9-2cad8f11fbb0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-controller-manager" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" }, { "kind": "ServiceAccount", "name": "kube-controller-manager", "namespace": "kube-system" }, { "kind": "ServiceAccount", "name": "leader-election-controller", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:11Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system::leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "248", "uid": "40cb43b8-21b1-4889-9eba-54b451a291c1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-scheduler" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" }, { "kind": "ServiceAccount", "name": "kube-scheduler", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:12Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:bootstrap-signer", "namespace": "kube-system", "resourceVersion": "253", "uid": "63abdb3d-b208-4c33-b7ca-e700af6e42cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:bootstrap-signer" }, "subjects": [ { "kind": "ServiceAccount", "name": "bootstrap-signer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:12Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:cloud-provider", "namespace": "kube-system", "resourceVersion": "255", "uid": "bffb9196-a149-4f7a-95a6-e7a86005cac7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:cloud-provider" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-provider", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:18:12Z", "labels": { "kubernetes.io/bootstrapping": "rbac-defaults" }, "name": "system:controller:token-cleaner", "namespace": "kube-system", "resourceVersion": "256", "uid": "dd87e000-074a-4e3a-8bd4-6d8cc6054914" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:controller:token-cleaner" }, "subjects": [ { "kind": "ServiceAccount", "name": "token-cleaner", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:deployers", "namespace": "kube-system", "resourceVersion": "20824", "uid": "0caee035-fd94-466c-8a9a-961753ed7a4c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-builders", "namespace": "kube-system", "resourceVersion": "20823", "uid": "45debf6a-ce7a-4a7a-84a3-cc2677c082c3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-pullers", "namespace": "kube-system", "resourceVersion": "20741", "uid": "e46d3483-07dd-4f5d-a9f9-4df7d5bca0f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:kube-system" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:12Z", "name": "system:openshift:controller:kube-apiserver-check-endpoints", "namespace": "kube-system", "resourceVersion": "7409", "uid": "17acb3d4-6c33-458d-bdce-26e8d981fed1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "extension-apiserver-authentication-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:serviceaccount:openshift-kube-apiserver:check-endpoints" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:59Z", "name": "system:openshift:leader-locking-kube-controller-manager", "namespace": "kube-system", "resourceVersion": "6128", "uid": "02056ddc-7b3e-498c-88c9-9d10ee8a004d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-controller-manager" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:56Z", "name": "system:openshift:leader-locking-kube-scheduler", "namespace": "kube-system", "resourceVersion": "5915", "uid": "d547015c-d42a-4d81-9e39-985f6aa6c6c1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system::leader-locking-kube-scheduler" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "openshift-pipelines-edit", "namespace": "null", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51668", "uid": "046f937c-b839-41e5-9509-8a7857d43f35" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "null" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "null", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51664", "uid": "5bf6d66f-0a4d-4484-9362-835195d3faa5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "null" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:deployers", "namespace": "null", "resourceVersion": "40910", "uid": "d6e14818-f164-45ef-8a60-b042cd73e2ef" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "null" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:image-builders", "namespace": "null", "resourceVersion": "40913", "uid": "200930db-3193-4e5a-a4f2-26cf31dce24b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "null" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:image-pullers", "namespace": "null", "resourceVersion": "40909", "uid": "64ca45a0-ccfc-485c-ba13-ce0b99b72f2b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:null" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:deployers", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "40326", "uid": "be5a0d3f-6d54-4165-9e3b-2d074e618b85" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:image-builders", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "40285", "uid": "52d50d4a-2cab-43be-8211-e268d87faec4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:image-pullers", "namespace": "open-cluster-management-agent-addon", "resourceVersion": "40283", "uid": "b73d7635-5091-4612-92d8-420095b0df5e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:open-cluster-management-agent-addon" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:56:32Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-registration:agent", "namespace": "open-cluster-management-agent", "resourceVersion": "39763", "uid": "28ab2265-40d2-4318-b678-5abc1192b616" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet-registration:agent" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:56:32Z", "labels": { "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "open-cluster-management:management:klusterlet-work:agent", "namespace": "open-cluster-management-agent", "resourceVersion": "39773", "uid": "36b1fd99-35d6-4a95-b57f-e34dc41ba3cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "open-cluster-management:management:klusterlet-work:agent" }, "subjects": [ { "kind": "ServiceAccount", "name": "klusterlet-work-sa", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:deployers", "namespace": "open-cluster-management-agent", "resourceVersion": "40286", "uid": "8bab58ba-2195-46ea-8764-fc577fd40ca5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:image-builders", "namespace": "open-cluster-management-agent", "resourceVersion": "40284", "uid": "cba3218f-abc6-46ac-8477-43e800f9392c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:56:47Z", "name": "system:image-pullers", "namespace": "open-cluster-management-agent", "resourceVersion": "40325", "uid": "d1ada909-877a-40e5-aede-412175c4b939" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:open-cluster-management-agent" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:15Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1079", "uid": "1279e001-193b-4a79-8342-861aab8585da" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:26Z", "name": "system:deployers", "namespace": "openshift-apiserver-operator", "resourceVersion": "20943", "uid": "e880b5fd-5641-4f97-8d0c-d3d9ef5bbe37" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:28Z", "name": "system:image-builders", "namespace": "openshift-apiserver-operator", "resourceVersion": "21104", "uid": "ac1cf101-b7c5-4177-82d8-cf2f7bf76895" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:27Z", "name": "system:image-pullers", "namespace": "openshift-apiserver-operator", "resourceVersion": "20975", "uid": "c4f72c50-29b9-449f-8d48-1465c8571ad1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:23:00Z", "name": "prometheus-k8s", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "6308", "uid": "bd3937d6-29a1-476a-a86c-5e580a6dd56c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:27Z", "name": "system:deployers", "namespace": "openshift-apiserver", "resourceVersion": "21003", "uid": "dc977f23-b49f-4c1b-aea6-3bbf0bd313c3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:27Z", "name": "system:image-builders", "namespace": "openshift-apiserver", "resourceVersion": "21013", "uid": "4e90cf55-e5fd-463e-89d1-19e414b2811d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:27Z", "name": "system:image-pullers", "namespace": "openshift-apiserver", "resourceVersion": "21002", "uid": "e9085a10-608a-4c70-9eca-18d2b9547513" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:23:26Z", "name": "prometheus-k8s", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "8399", "uid": "c65bdcfb-5f5e-4d90-aea4-2cd86616251e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:29Z", "name": "system:deployers", "namespace": "openshift-authentication-operator", "resourceVersion": "21195", "uid": "68c144ba-3987-432f-8d23-688c76fc9625" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:30Z", "name": "system:image-builders", "namespace": "openshift-authentication-operator", "resourceVersion": "21307", "uid": "001c64dc-d27d-4429-9c5f-cd474a34e212" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:26Z", "name": "system:image-pullers", "namespace": "openshift-authentication-operator", "resourceVersion": "20932", "uid": "70477c79-aec6-430c-a5d4-9aa7624540f0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-authentication-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:23:28Z", "name": "prometheus-k8s", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "8511", "uid": "d398db96-81e0-460e-a075-2aace273bdd7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:29Z", "name": "system:deployers", "namespace": "openshift-authentication", "resourceVersion": "21180", "uid": "ff7218e8-1ad5-4867-94e5-b10ae59badd4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:30Z", "name": "system:image-builders", "namespace": "openshift-authentication", "resourceVersion": "21299", "uid": "b880fd25-0087-43f4-a2ea-d0f907ac77ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:28Z", "name": "system:image-pullers", "namespace": "openshift-authentication", "resourceVersion": "21125", "uid": "165f2163-92fa-4fb5-9b64-fcd44dff060b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-authentication" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:26Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-leader-election-rolebinding", "namespace": "openshift-catalogd", "resourceVersion": "8392", "uid": "f72acf1f-390e-4e2e-adfb-54a2ab8c53a5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-leader-election-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "catalogd-controller-manager", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:27Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-manager-rolebinding", "namespace": "openshift-catalogd", "resourceVersion": "8427", "uid": "a334f039-94cc-4297-8322-c8e8385d3206" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "catalogd-controller-manager", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:28Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-metrics-monitor-rolebinding", "namespace": "openshift-catalogd", "resourceVersion": "8479", "uid": "99a9490a-5e72-4fd4-87dc-e6b514f6dbd0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-metrics-monitor-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:29Z", "name": "system:deployers", "namespace": "openshift-catalogd", "resourceVersion": "21181", "uid": "36595d2c-bea8-4bda-8279-ae9500f5f3ba" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:30Z", "name": "system:image-builders", "namespace": "openshift-catalogd", "resourceVersion": "21306", "uid": "196c2af9-bf51-4dbe-98c4-74f12487aaaf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:27Z", "name": "system:image-pullers", "namespace": "openshift-catalogd", "resourceVersion": "21049", "uid": "eb5b857f-8a2e-419c-bec9-534f71b13cda" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:11Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3008", "uid": "71076735-1fb3-4454-a7c4-3241b5208c0a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "21838", "uid": "d49705a9-9a1f-42de-ab17-c706143de4cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "21840", "uid": "f1b2210d-3efe-4d50-832a-3702f8417554" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:30Z", "name": "system:image-pullers", "namespace": "openshift-cloud-controller-manager-operator", "resourceVersion": "21327", "uid": "b6c22888-3133-4852-9fda-71e837ba9ec0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:14Z", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3038", "uid": "d75a3c21-049b-4ae1-a88b-e82b85d52a68" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-controller-manager", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:12Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3014", "uid": "31424b6f-4af9-4d0c-a963-8fade17149a0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:29Z", "name": "system:deployers", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "21229", "uid": "ddc8387e-7665-48ae-8c83-3dd448afb6d4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "21826", "uid": "08c58d7e-41ab-43cc-8811-8d51efedee88" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:30Z", "name": "system:image-pullers", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "21272", "uid": "56fe4b1a-0b98-4a0c-87ff-ca097cdab527" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:08Z", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2966", "uid": "43007958-d7ba-448f-afa7-b84936d2b795" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-credential-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:33:25Z", "name": "pod-identity-webhook", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "19542", "uid": "804fc8d3-8e62-4526-8de7-8bee22f28343" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pod-identity-webhook" }, "subjects": [ { "kind": "ServiceAccount", "name": "pod-identity-webhook", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:12Z", "name": "prometheus-k8s", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "848", "uid": "07bb457f-e53f-4389-929e-6a006330c38a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "21831", "uid": "a8591547-62a2-4d20-bf89-dbe0f98c7578" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "21829", "uid": "c0814240-6018-46c8-ae25-0a40f804f158" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "21837", "uid": "74f0973d-987f-4709-8723-a9430fa9fd1a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:27Z", "name": "cloud-network-config-controller-rb", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "3895", "uid": "36779835-fc26-421d-9244-f04d74d45500" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-network-config-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "21827", "uid": "0ebb2920-d648-47eb-aab2-d402f8d74a0c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "21830", "uid": "a091c8bd-8cdb-4bd7-94d0-1b00922727f7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cloud-network-config-controller", "resourceVersion": "21834", "uid": "f460e313-b56e-4b51-88f5-69a434bb1416" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-network-config-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "21841", "uid": "d73fb8ab-4b78-4486-808e-a54822cfb545" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "21835", "uid": "c48cc166-22bf-44b7-8c0f-fd5c1823a0c5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cloud-platform-infra", "resourceVersion": "21836", "uid": "7ca60e83-feba-47d1-b32d-ee91665513a5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cloud-platform-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:27Z", "name": "aws-ebs-csi-driver-lease-leader-election", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "11204", "uid": "bd15da26-0e93-4d74-a391-7c29426c0878" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-lease-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-controller-sa", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:11Z", "name": "aws-ebs-csi-driver-operator-rolebinding", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "10423", "uid": "82942655-31b1-4083-bf87-f20e970983c4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-operator", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:28Z", "name": "aws-ebs-csi-driver-prometheus", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "11287", "uid": "49e6b0df-b91c-46d8-ad69-9a8877d97542" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-prometheus" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "21828", "uid": "c53a874e-354d-4db8-ba21-edef811d0545" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "21872", "uid": "2e78a51f-2eae-42a5-abae-24ab386ce5f2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "21839", "uid": "ad87165f-9da4-41f9-b3a2-09bb301f8728" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:18Z", "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1165", "uid": "033f03c6-9f2b-4142-834e-6c4447cf2654" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-approver" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-approver-sa", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:16Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1087", "uid": "1b7de9db-a30d-4341-a8ed-d25b3a34f12f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "21883", "uid": "d664a7f2-1676-4e70-9cd6-118779367604" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "21843", "uid": "d12adecc-8120-4ba3-aacb-8fe3d6300407" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-machine-approver", "resourceVersion": "21833", "uid": "127b9f12-93e1-4bc4-a263-187472a189b8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:24Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1426", "uid": "7923c3d0-1fd0-425f-af5a-9f3f0d0f8abc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "21844", "uid": "77ff9bcf-d506-4768-aefc-9971944bbcd4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "21876", "uid": "a3ae0cfe-8c0d-4b4a-9709-51123ecb1944" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-node-tuning-operator", "resourceVersion": "21879", "uid": "576deb5b-92a4-4b33-9889-6bbb138cca66" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-node-tuning-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "21842", "uid": "e0db788b-a92d-4d1b-b6d0-bcc926c3d735" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "21874", "uid": "8c8a44ed-d595-42ad-9787-fb810a0f1f44" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-olm-operator", "resourceVersion": "21885", "uid": "387096d0-68f6-40a0-8e46-1a8835058a4f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-olm-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:37Z", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2026", "uid": "24a22083-cea0-4a18-b15d-d61d6d65a1f0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-samples-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:35:51Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "25816", "uid": "d86c9d26-eaee-4d9b-a381-bac5ecf0fa7b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "21873", "uid": "7b218fa5-91fc-4211-8c94-edfaa4fb06d5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "21882", "uid": "7aaebb36-e870-4173-8d90-a5b68433e3ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-samples-operator", "resourceVersion": "21880", "uid": "adb6a570-eeca-40a1-8778-67c92f887619" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "name": "csi-snapshot-controller-leaderelection", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1583", "uid": "91d25a6a-913e-4d1a-bc04-2d4c1cbc200b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "csi-snapshot-controller-leaderelection" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:37Z", "labels": { "addonmanager.kubernetes.io/mode": "Reconcile", "kubernetes.io/cluster-service": "true" }, "name": "csi-snapshot-controller-operator-role", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2005", "uid": "0dee78d6-b457-4fe6-9880-43e4922def21" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "csi-snapshot-controller-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "csi-snapshot-controller-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:13Z", "name": "prometheus", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "910", "uid": "20c3cc1e-5c31-42fe-b991-295ec1f48fb9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "21884", "uid": "412005ec-2065-434e-8b76-cb366cc20d40" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "21881", "uid": "722edc24-4923-47d3-a6e4-4f5e4a343f0e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "21878", "uid": "e20d7a0f-7069-4b47-8a92-5d831332206a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-storage-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "Grant Prometheus access to monitor the cluster-version operator's metrics." }, "creationTimestamp": "2026-04-28T12:19:11Z", "name": "prometheus-k8s", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "822", "uid": "177318d6-ba93-4203-afa8-930088e087ce" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-cluster-version", "resourceVersion": "21875", "uid": "2f51ddec-6c47-4c38-8bd2-88663cee8269" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-cluster-version", "resourceVersion": "21889", "uid": "cc3e0241-5051-42d6-859d-204d74946339" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-cluster-version", "resourceVersion": "21877", "uid": "ea0ef8de-3ed7-44b0-b728-c7607b07efe5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-cluster-version" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:13Z", "name": "aws-ebs-csi-driver-operator-aws-config-clusterrolebinding", "namespace": "openshift-config-managed", "resourceVersion": "10613", "uid": "8f3d0a45-5a2a-4ba8-b324-caa3b73b6d7c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "aws-ebs-csi-driver-operator-aws-config-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "aws-ebs-csi-driver-operator", "namespace": "openshift-cluster-csi-drivers" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:01Z", "name": "cloud-credential-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2861", "uid": "e31e3ed3-d93f-4022-bc4b-841b2c52e4b3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-credential-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:09Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2970", "uid": "0c6617eb-cd67-4f92-a9d6-3d9d64e00241" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "console-configmap-reader", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2640", "uid": "73efee28-34f9-4a67-896d-4fab6297c39d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-configmap-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "console-operator", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2580", "uid": "6bbf0965-f6dc-4189-b9bb-7fbfd238b461" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "console-public", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2592", "uid": "47b1cba0-ca47-4755-baae-febdcd40f8e9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-public" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:42Z", "name": "insights-operator-etc-pki-entitlement", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2311", "uid": "859a1acd-f5d4-4b02-8eb2-9f275a79702d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator-etc-pki-entitlement" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "machine-api-controllers", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2597", "uid": "dbbc37ea-ef5c-4420-a5c6-0e70e125dbf4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:04Z", "name": "machine-approver", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2893", "uid": "2ab2aa0b-e12b-490f-9341-ffd98100f4b1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-approver" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-approver-sa", "namespace": "openshift-cluster-machine-approver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Grants access from any authenticated user to the openshift-network-features ConfigMap" }, "creationTimestamp": "2026-04-28T12:21:48Z", "name": "openshift-network-public-role-binding", "namespace": "openshift-config-managed", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4459", "uid": "84e66303-7bbc-4b25-b32b-d4fc437f8ef0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-network-public-role" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-config-managed", "resourceVersion": "21896", "uid": "2412c961-d276-4d48-a895-015150f84deb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-config-managed", "resourceVersion": "21887", "uid": "fb833234-d4a3-4170-86a7-3bd3f8b96527" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-config-managed", "resourceVersion": "21890", "uid": "b42b8cd8-dbb4-45e2-9c29-bcce95a9febe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config-managed" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:23Z", "name": "system:openshift:oauth-servercert-trust", "namespace": "openshift-config-managed", "resourceVersion": "8210", "uid": "f441efb8-eedb-41f7-9dc1-e42c38da4f7a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:oauth-servercert-trust" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:41Z", "name": "prometheus-k8s", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2247", "uid": "e42e29ed-2829-4dc4-bab4-161ae2a38aa1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-config-operator", "resourceVersion": "21886", "uid": "51ecf90a-50bc-43fe-b2b7-63f78d57f4c6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-config-operator", "resourceVersion": "21892", "uid": "73102a81-608a-48e4-8477-3494b06d065c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-config-operator", "resourceVersion": "21899", "uid": "aec989da-aa02-4de4-b517-3632c63c3ca8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:29Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "catalogd-manager-rolebinding", "namespace": "openshift-config", "resourceVersion": "8522", "uid": "ae014919-8ba6-432d-acf3-f66473c331f1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "catalogd-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "catalogd-controller-manager", "namespace": "openshift-catalogd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:05Z", "name": "cloud-credential-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2897", "uid": "bbe1f73e-b727-4462-9935-363548e2d05b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cloud-credential-operator-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:05Z", "name": "cluster-cloud-controller-manager", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2898", "uid": "66c9895d-92a1-4394-87c8-099b7c43ec14" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-cloud-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:23:34Z", "name": "cluster-samples-operator-openshift-config-secret-reader", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "8903", "uid": "b47f5400-657b-4c5f-b3f6-74cdb1e4fca6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "coreos-pull-secret-reader" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "console-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2600", "uid": "bbd85988-0c40-476c-9e5b-93e829dbe572" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:38Z", "name": "ingress-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2077", "uid": "1d19aa7e-2729-4419-b3d6-680dbc066dd5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ingress-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "ingress-operator", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:39Z", "name": "insights-operator", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2097", "uid": "03101fd2-ea52-45e1-8e0e-97e15e2565fa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "machine-api-controllers", "namespace": "openshift-config", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2588", "uid": "d4d831ef-9885-4f52-8a92-db0f3a84c23b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:27Z", "labels": { "app.kubernetes.io/name": "catalogd", "app.kubernetes.io/part-of": "olm" }, "name": "operator-controller-manager-rolebinding", "namespace": "openshift-config", "resourceVersion": "8447", "uid": "8c057728-2d76-4574-8ac2-beb5bb722270" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-config", "resourceVersion": "21871", "uid": "24819302-20aa-48b4-8638-453a7252380f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-config", "resourceVersion": "21891", "uid": "f906d564-b2af-42d9-8d81-d5ef3d801a13" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-config", "resourceVersion": "21893", "uid": "1b4c115e-97ed-4bf0-9d28-eb30181fa031" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-config" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2561", "uid": "0bacf96c-def4-4228-8c1c-dc29488d760b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:00Z", "name": "prometheus-k8s", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2832", "uid": "bb0078b1-939d-4cf3-99dc-34f54c82acdf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-console-operator", "resourceVersion": "21894", "uid": "dfcf5fee-235f-4c47-9461-73b75ba62b3b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-builders", "namespace": "openshift-console-operator", "resourceVersion": "22064", "uid": "04d1830a-e1c7-42ae-9120-f246c5ba84f8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-console-operator", "resourceVersion": "21897", "uid": "0f79fe1e-8d77-432b-acaf-b5102bc6219a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:42Z", "name": "console-user-settings-admin", "namespace": "openshift-console-user-settings", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2304", "uid": "3d482712-69e8-46ca-875c-6a289b8497ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-user-settings-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "console", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:deployers", "namespace": "openshift-console-user-settings", "resourceVersion": "22036", "uid": "b140f480-9bed-49c1-abd4-4f276463ee2b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-builders", "namespace": "openshift-console-user-settings", "resourceVersion": "22116", "uid": "20430851-56bd-4ccf-b2c9-21707d893f9d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-console-user-settings", "resourceVersion": "21969", "uid": "c68d1b38-6471-45ae-b11e-4865dec2ce54" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console-user-settings" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "console-operator", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2533", "uid": "06ee2f69-2ca2-4498-b6d4-9312535ba776" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:56Z", "name": "prometheus-k8s", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2797", "uid": "09302e2e-4f83-4980-b5bf-d4587b9d8691" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:deployers", "namespace": "openshift-console", "resourceVersion": "21898", "uid": "12174c28-3fb6-4df9-812a-f574a46311de" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-builders", "namespace": "openshift-console", "resourceVersion": "21895", "uid": "f4cc5236-ebff-48cf-812c-9e9de360676e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:42Z", "name": "system:image-pullers", "namespace": "openshift-console", "resourceVersion": "21888", "uid": "397357ba-020c-47f4-8151-e40bab4dbaf1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:16Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1089", "uid": "59365c6d-09e5-4e8c-bada-50600b4f4ba5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:deployers", "namespace": "openshift-controller-manager-operator", "resourceVersion": "22160", "uid": "a9956bbf-c373-425d-ac30-30dceab94015" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-builders", "namespace": "openshift-controller-manager-operator", "resourceVersion": "22196", "uid": "f3618acd-eec5-4eb0-8bb5-aa87bd255097" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-pullers", "namespace": "openshift-controller-manager-operator", "resourceVersion": "22193", "uid": "4f4581b4-8f20-42a2-810e-3cfc4bb90fa0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:22:59Z", "name": "prometheus-k8s", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "6643", "uid": "88a5ca54-61b8-4cd3-b29d-8a29b99719ed" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:deployers", "namespace": "openshift-controller-manager", "resourceVersion": "22117", "uid": "6ea2a5c6-7d77-44a1-8c01-f3374e61dacd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-builders", "namespace": "openshift-controller-manager", "resourceVersion": "22159", "uid": "a801560c-7d08-4260-b2d0-a4dfec7ba0ea" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-pullers", "namespace": "openshift-controller-manager", "resourceVersion": "22094", "uid": "db80e379-cc72-4e47-86a4-71419f3b95f3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:01Z", "name": "system:openshift:leader-locking-openshift-controller-manager", "namespace": "openshift-controller-manager", "resourceVersion": "6501", "uid": "d4f2f82f-2e56-4b0a-bdfc-c85e221b4b68" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-locking-openshift-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-controller-manager-sa", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:19Z", "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1221", "uid": "7b34e25a-f3ab-439f-910a-0e583787d53a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "dns-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "dns-operator", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:15Z", "name": "prometheus-k8s", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1086", "uid": "f66a90e4-6736-45b3-9ab9-97c89c9af2aa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-dns-operator", "resourceVersion": "22237", "uid": "4ba9b9f7-7d47-4427-b078-b3e6ac18929f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-dns-operator", "resourceVersion": "22259", "uid": "1bb26930-ca40-4d95-a6a4-aa17d84bddb1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-pullers", "namespace": "openshift-dns-operator", "resourceVersion": "22195", "uid": "dee1f858-3dca-4b55-888a-7b9af224868f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-dns-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:09Z", "name": "prometheus-k8s", "namespace": "openshift-dns", "resourceVersion": "10020", "uid": "eb55a2dc-d6f5-455d-8018-3775058aaa38" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:deployers", "namespace": "openshift-dns", "resourceVersion": "22192", "uid": "1c30a838-dc0c-47cc-9be0-a0c6527ccfe3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-dns", "resourceVersion": "22217", "uid": "83fc4e56-f474-4ea6-b4a9-a82135cda4d0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:43Z", "name": "system:image-pullers", "namespace": "openshift-dns", "resourceVersion": "22140", "uid": "369ef607-2183-4a15-b87c-4c1fdabed7b2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-dns" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:16Z", "name": "prometheus-k8s", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1094", "uid": "84f9ee30-c695-4ea3-a5a5-1982631b5411" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-etcd-operator", "resourceVersion": "22302", "uid": "ab61a2be-0703-46d9-92fc-e3ea3a252564" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-etcd-operator", "resourceVersion": "22314", "uid": "5cd52091-865e-40af-842e-702e4dd24532" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-etcd-operator", "resourceVersion": "22287", "uid": "c8cb0ce6-c47b-4312-9e3f-55557d98d62f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-etcd-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:05Z", "name": "prometheus-k8s", "namespace": "openshift-etcd", "resourceVersion": "6923", "uid": "2132fbee-a02b-40f6-85e8-149708a39f76" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-etcd", "resourceVersion": "22258", "uid": "8715935c-d828-4d24-a814-7045ed774122" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-etcd", "resourceVersion": "22304", "uid": "7dbc3d4d-dcb1-4b25-9c46-8ad3f66e2325" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-etcd", "resourceVersion": "22216", "uid": "e0ff84d6-d0c1-4f1c-a3cc-827bbbbb3244" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-etcd" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:10Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45911", "uid": "859dfe98-b60e-4a51-965b-7dea21bf2faf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-applicationset-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:08Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45715", "uid": "43c2a75a-b6e5-4ed0-b320-cf48fd5ad5bd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-argocd-application-controller", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:08Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-dex-server", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45653", "uid": "2597b078-3592-4505-8b07-67d86efec4c1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-argocd-dex-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-argocd-dex-server", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:08Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-redis", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45746", "uid": "0b3ad43f-e280-4c5a-a56c-35e3f58b3ef0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-argocd-redis" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-argocd-redis", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:08Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-redis-ha", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45740", "uid": "7995b730-f628-43ff-9df7-eb221b26c3af" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-argocd-redis-ha" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-argocd-redis-ha", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "openshift-gitops", "argocds.argoproj.io/namespace": "openshift-gitops" }, "creationTimestamp": "2026-04-28T12:59:08Z", "labels": { "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45728", "uid": "e6fb2cdc-0e6f-4511-a36a-85912f16c8f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-argocd-server", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:08Z", "name": "openshift-gitops-prometheus-k8s-read-binding", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "bcd7fd92-3d64-40a4-874b-b7954ad3730f" } ], "resourceVersion": "45621", "uid": "cd19483f-036b-4c11-8354-1b2703cc4ac9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-read" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:59:08Z", "name": "system:deployers", "namespace": "openshift-gitops", "resourceVersion": "45598", "uid": "2561ec33-8379-45a8-a308-0856115a2a73" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:59:08Z", "name": "system:image-builders", "namespace": "openshift-gitops", "resourceVersion": "45641", "uid": "f6df3348-932d-4fc5-8741-e72116840c52" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:59:08Z", "name": "system:image-pullers", "namespace": "openshift-gitops", "resourceVersion": "45607", "uid": "e64316cd-6de8-403b-88f5-e31b0b53b79d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-host-network", "resourceVersion": "22313", "uid": "dcb5b69b-e089-43ba-8784-19505c9e15f2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-host-network", "resourceVersion": "22324", "uid": "8b315dbd-c884-404d-b644-b53029fcf4f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-host-network", "resourceVersion": "22301", "uid": "5e33027e-d736-48e7-84ef-e6e8df031ce1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-host-network" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:37Z", "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1992", "uid": "c96e16f6-f2cc-4b17-a1d6-8c8392df68b5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-image-registry-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-image-registry-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:40Z", "name": "node-ca", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2173", "uid": "e37d9f6a-f878-435e-b6a0-cf0c6e8d4d1e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "node-ca" }, "subjects": [ { "kind": "ServiceAccount", "name": "node-ca", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:19Z", "name": "prometheus-k8s", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1222", "uid": "8e12d687-c639-4472-a40d-7f50307b6fc1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-image-registry", "resourceVersion": "22325", "uid": "a7466abc-b7e0-400d-8fd4-de34ec92b34a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-image-registry", "resourceVersion": "22339", "uid": "040e8738-b96c-49d6-96d6-ea41f9e54606" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-image-registry", "resourceVersion": "22323", "uid": "efff0d81-0fe0-4f27-bad6-9d8c92ab647f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-image-registry" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-infra", "resourceVersion": "22340", "uid": "0da2f295-c0ed-4421-938e-1da7116b6386" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-builders", "namespace": "openshift-infra", "resourceVersion": "22342", "uid": "e8cdeb9c-ffe9-4ba7-a026-bfdebbc56ace" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-infra", "resourceVersion": "22326", "uid": "347f38e7-1054-43e4-9dc1-486bb9b03c3a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:59Z", "name": "system:openshift:sa-creating-openshift-controller-manager", "namespace": "openshift-infra", "resourceVersion": "6217", "uid": "e743fa5f-6efe-46c5-b041-f7cb8616650c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-creating-openshift-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-controller-manager-sa", "namespace": "openshift-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:59Z", "name": "system:openshift:sa-creating-route-controller-manager", "namespace": "openshift-infra", "resourceVersion": "6177", "uid": "67ea0e03-cbbf-475c-8cf6-02c6f28e78f4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-creating-route-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "route-controller-manager-sa", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-ingress-canary", "resourceVersion": "22889", "uid": "6404e58b-abf0-4b6c-a7eb-c07d533e9d3c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-builders", "namespace": "openshift-ingress-canary", "resourceVersion": "22888", "uid": "09c10d17-5b98-4985-83ea-45d5b51e9069" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-ingress-canary", "resourceVersion": "22883", "uid": "7e4e42b1-91ae-44a3-b856-6df5e781d6e7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress-canary" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:33Z", "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1855", "uid": "5a0458ea-0f6d-4963-ae37-0d06222a7259" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ingress-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "ingress-operator", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:13Z", "name": "prometheus-k8s", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "930", "uid": "1bbc5582-8d10-46c7-9fbe-a3b32d650a3f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:deployers", "namespace": "openshift-ingress-operator", "resourceVersion": "22374", "uid": "42a6faa8-0166-4d00-8670-38fbffb2a127" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-builders", "namespace": "openshift-ingress-operator", "resourceVersion": "22386", "uid": "da623671-3fb7-48bc-aab9-543e1dbcd04f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-ingress-operator", "resourceVersion": "22365", "uid": "9ebe3a56-53d0-48db-89b4-781d8adf5850" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:12Z", "name": "prometheus-k8s", "namespace": "openshift-ingress", "resourceVersion": "10581", "uid": "f2e4d839-916c-4a9c-af10-9f904d400693" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:deployers", "namespace": "openshift-ingress", "resourceVersion": "22352", "uid": "a35567bb-03bf-4c6d-81cc-b4369933a5d3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-builders", "namespace": "openshift-ingress", "resourceVersion": "22364", "uid": "a2988a7a-a01f-4362-9ea9-68048922be08" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:44Z", "name": "system:image-pullers", "namespace": "openshift-ingress", "resourceVersion": "22341", "uid": "92b1e624-e1a4-449c-9757-4b076bed5670" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ingress" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:40Z", "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2188", "uid": "437b8529-5396-40bc-9fde-e63065f03602" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:41Z", "name": "insights-operator-obfuscation-secret", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2250", "uid": "a5e6b94a-764c-4b4b-96bc-18d2c99ddd9f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "insights-operator-obfuscation-secret" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "prometheus-k8s", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2566", "uid": "27a5bb81-71fd-4523-92de-83f404dbd570" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:deployers", "namespace": "openshift-insights", "resourceVersion": "22395", "uid": "ac8392cd-2f0f-44cc-939c-ad0b02d74b74" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-builders", "namespace": "openshift-insights", "resourceVersion": "22404", "uid": "27313f49-66b1-475e-a7ef-6a3e385f483d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-pullers", "namespace": "openshift-insights", "resourceVersion": "22376", "uid": "0d70e194-dce8-48c5-b292-fc6eedb15495" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:35Z", "name": "host-networking-system-node", "namespace": "openshift-kni-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1924", "uid": "1e0ef5bb-97e7-426c-af61-75787f701547" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:deployers", "namespace": "openshift-kni-infra", "resourceVersion": "22414", "uid": "b7b443d2-c23b-401c-af67-4e36d50b1283" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-builders", "namespace": "openshift-kni-infra", "resourceVersion": "22428", "uid": "593509b2-9210-4050-965b-bd7932b68c9f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-pullers", "namespace": "openshift-kni-infra", "resourceVersion": "22394", "uid": "9a750b7e-90ca-4ee6-80db-1e2d5d5150a6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kni-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:13Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "902", "uid": "b1bdae7a-77b5-48cd-9ca7-059ca2fa8ce6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "22893", "uid": "c2d0d517-c161-41be-8137-88a74dacdba0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-builders", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "22891", "uid": "396676b8-b121-4bc8-8a72-2b0761a2df28" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-apiserver-operator", "resourceVersion": "22876", "uid": "a43caeed-378d-4eea-a062-1a18aae16b3f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-apiserver-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:32Z", "name": "prometheus-k8s", "namespace": "openshift-kube-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1841", "uid": "385d3799-3aa7-4cb9-bb20-f2929557d117" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-kube-apiserver", "resourceVersion": "22885", "uid": "d22405f9-7a54-4c29-9761-b49adfa9bd35" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-builders", "namespace": "openshift-kube-apiserver", "resourceVersion": "22887", "uid": "4705435b-f7e7-4756-8571-5725b2f23e94" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:45Z", "name": "system:image-pullers", "namespace": "openshift-kube-apiserver", "resourceVersion": "22413", "uid": "dbd06649-86f7-40eb-8a6b-ed0d9b0bfde8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:12Z", "name": "system:openshift:controller:check-endpoints", "namespace": "openshift-kube-apiserver", "resourceVersion": "7411", "uid": "add5cb25-6687-49db-bdc0-b93da49c18ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:openshift:controller:check-endpoints" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:serviceaccount:openshift-kube-apiserver:check-endpoints" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:13Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "911", "uid": "36ffbcc2-5b87-4237-8ad3-a5ae6b4e1e2b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "22881", "uid": "d2c93833-350d-4218-aa98-ebe150a4b00b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-builders", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "22884", "uid": "4584e3cb-1bab-4ade-921f-f90e7a68851c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-controller-manager-operator", "resourceVersion": "22877", "uid": "ed038c30-44b1-4f26-a622-fecebf525257" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-controller-manager-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:31Z", "name": "prometheus-k8s", "namespace": "openshift-kube-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1818", "uid": "cfb4619e-d796-4e84-83f7-e6ae9e0acb07" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-kube-controller-manager", "resourceVersion": "22878", "uid": "ab910777-1490-4af6-b65a-1406470a9be4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-builders", "namespace": "openshift-kube-controller-manager", "resourceVersion": "22886", "uid": "c32be921-74b7-4901-b9dc-91b92055e006" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-controller-manager", "resourceVersion": "22880", "uid": "a9394092-da39-4548-ab5f-900b0f9e22b8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:59Z", "name": "system:openshift:leader-election-lock-cluster-policy-controller", "namespace": "openshift-kube-controller-manager", "resourceVersion": "6155", "uid": "6923a2f6-3309-4172-a7c2-7ac16ec82de6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-election-lock-cluster-policy-controller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:16Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1092", "uid": "fecfe375-db6b-494b-ac33-06525ff2f95b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:deployers", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "23063", "uid": "3fc47b54-a80e-4a8d-98c4-ef128710cfd0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-builders", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "23051", "uid": "f06f4e95-2b5f-4c0c-981b-358bc6ef8162" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-scheduler-operator", "resourceVersion": "22894", "uid": "f6f4b34e-41fc-4640-a91e-5fe5fc4f4b99" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-scheduler-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:33Z", "name": "prometheus-k8s", "namespace": "openshift-kube-scheduler", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1877", "uid": "49655af5-1fc7-45ff-a93c-48927fd85615" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-kube-scheduler", "resourceVersion": "22892", "uid": "c185d709-808f-47fa-909e-c5e8b38b8756" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-builders", "namespace": "openshift-kube-scheduler", "resourceVersion": "23058", "uid": "6d63f536-df85-4cab-9bf8-b63bd6017920" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-scheduler", "resourceVersion": "22879", "uid": "91fafd66-1c8a-43b3-8c75-2eddfa2657c7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:56Z", "name": "system:openshift:sa-listing-configmaps", "namespace": "openshift-kube-scheduler", "resourceVersion": "5922", "uid": "0484fb86-ed29-4979-a06d-0569bd0547e3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:sa-listing-configmaps" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "system:kube-scheduler" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:deployers", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "23081", "uid": "3add32ea-cf85-4d2d-9f0a-3c12af55d482" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-builders", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "23019", "uid": "25f799c5-82f3-4c60-b427-f2aaba41b011" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-storage-version-migrator-operator", "resourceVersion": "22890", "uid": "16946a7d-aaca-4ebc-9ca6-73d5ff20514d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-storage-version-migrator-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:deployers", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "23087", "uid": "ced1f1eb-0eb3-46f0-a392-c713c222d499" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-builders", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "23056", "uid": "2235dbe8-7457-44c4-b2c2-04f137b4ece5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "22882", "uid": "dd67293f-3d74-40d2-8ccf-f4cfce9c2d8c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-kube-storage-version-migrator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:11Z", "labels": { "k8s-addon": "cluster-autoscaler.addons.k8s.io", "k8s-app": "cluster-autoscaler" }, "name": "cluster-autoscaler", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3011", "uid": "0f04d7aa-fb2d-425f-a937-e19774f2c5d2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-autoscaler" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-autoscaler", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:03Z", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2879", "uid": "b75b1f4f-57f3-4516-a952-e5985f86dfc3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-autoscaler-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:44Z", "name": "cluster-baremetal-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2403", "uid": "de720ed2-c09c-48a4-817c-0c1fb05122aa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-baremetal-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-baremetal-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:05Z", "name": "control-plane-machine-set-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2900", "uid": "1e9d09b3-c633-45b5-99ec-57ff7d56c6f9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "control-plane-machine-set-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "control-plane-machine-set-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "name": "machine-api-controllers", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2575", "uid": "c7f8c9c4-43f4-4c0c-bbcd-d63c746764ba" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-controllers" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-controllers", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "machine-api-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2615", "uid": "942dcbad-0f30-4180-b04f-51ddee381293" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-api-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-api-operator", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:12Z", "name": "prometheus-k8s-cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "3019", "uid": "e4e4d44a-7e2d-4bad-94f6-9251ce1169f0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-cluster-autoscaler-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:42Z", "name": "prometheus-k8s-cluster-baremetal-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2263", "uid": "deea13d0-8ba2-49f8-bb96-168e06f3e7e9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-cluster-baremetal-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "prometheus-k8s-machine-api-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2631", "uid": "6aec74a4-107d-4a92-9d31-325c10aacef0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-machine-api-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:deployers", "namespace": "openshift-machine-api", "resourceVersion": "23057", "uid": "a3e5e551-c3d5-4fb2-88a3-a647c6e4d2e8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-builders", "namespace": "openshift-machine-api", "resourceVersion": "23086", "uid": "fe90eeb8-b7a7-455b-8457-f14ad29955f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:image-pullers", "namespace": "openshift-machine-api", "resourceVersion": "22895", "uid": "cccfe23b-bde7-4b99-95ef-6f9cb9f287a2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-machine-api" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:09Z", "name": "machine-config-controller-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "10059", "uid": "2883b2fb-d43f-43ea-9f02-a5a52cafaea8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-controller-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:36Z", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator", "resourceVersion": "8991", "uid": "98377939-d50f-4412-b020-c9e0eea0c135" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "machine-config-daemon" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:35Z", "name": "machine-config-daemon-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "8941", "uid": "1503a2f7-924c-4339-82cf-d67d7c626f39" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-config-daemon-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:44Z", "name": "machine-os-builder-events", "namespace": "openshift-machine-config-operator", "resourceVersion": "11885", "uid": "1cb7dedd-e8fe-4384-9183-a469387ffc76" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "machine-os-builder-events" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:10Z", "name": "machine-os-puller-binding", "namespace": "openshift-machine-config-operator", "resourceVersion": "10135", "uid": "131363fc-b24b-462c-8a6a-b5c6424c31ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-os-puller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:09Z", "name": "mcc-prometheus-k8s", "namespace": "openshift-machine-config-operator", "resourceVersion": "10080", "uid": "580c12ec-f527-490f-99ce-a043c20838c4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "mcc-prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-controller", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:35Z", "name": "mcd-prometheus-k8s", "namespace": "openshift-machine-config-operator", "resourceVersion": "8978", "uid": "be0f8e9b-9e6b-4a1c-98b1-82a59539b1e2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "mcd-prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:27Z", "name": "prometheus-k8s", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1628", "uid": "73776276-424f-405f-885d-bfb2c1d4fb9b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:54Z", "name": "system:deployers", "namespace": "openshift-machine-config-operator", "resourceVersion": "22995", "uid": "eb305fed-018d-4af7-ac18-56b2fcb2b466" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-machine-config-operator", "resourceVersion": "23165", "uid": "2a5c8ffb-5271-4a7c-8b15-d1947cea48d2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-pullers", "namespace": "openshift-machine-config-operator", "resourceVersion": "23055", "uid": "b0b9c03c-011f-47c5-8b96-3d883e1269fe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-machine-config-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:18Z", "labels": { "olm.managed": "true" }, "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794", "uid": "d9cdfcc4-578a-449a-8ebc-7b22ef196c3d" } ], "resourceVersion": "42502", "uid": "53d36fc8-422e-4f35-8b2c-909e0402c7f4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "062b85eb8d31762de8669535a88ce29f531b40a99da464704a349df5a226794" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:16Z", "labels": { "olm.managed": "true" }, "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f", "uid": "25d29343-8161-47ce-b6aa-ac0a28597b5b" } ], "resourceVersion": "42323", "uid": "dabcc669-f954-4da3-b463-2ab25b2d80c0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "09e84d3fdfac1305b8f399db3dfe1b7c79d582fe1356304a82b56f71d74b69f" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:11Z", "labels": { "olm.managed": "true" }, "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43", "uid": "d99d74a5-d5bf-49ed-9105-b25bacedbd2a" } ], "resourceVersion": "42184", "uid": "dbc5485a-c1a0-4e11-ae0a-facd655faeb8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "79f871b6353a8442b4f467c124caf7fa84891a4baa69c2582c3b4a7b5186b43" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:11Z", "labels": { "olm.managed": "true" }, "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9", "uid": "d5017203-f140-41c2-a472-78e6b518c26c" } ], "resourceVersion": "42167", "uid": "ec8c35f4-84f6-4839-853d-6eeb2ae722ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "a54ee9eda2828a12414ea519ebe1984caa1e89a473cf1b21256364ccf2cdca9" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:17Z", "labels": { "olm.managed": "true" }, "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4", "uid": "807c04b6-f53c-40f8-a27c-cc24c3bd0ec6" } ], "resourceVersion": "42453", "uid": "07b14aec-027a-4263-8b9b-8c6bb8f048aa" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "e5019535d6b6453da86ddbbb8482f88c2a0f64b68ae979a9869dbc95d91aaa4" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:16Z", "labels": { "olm.managed": "true" }, "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "v1", "blockOwnerDeletion": false, "controller": false, "kind": "ConfigMap", "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb", "uid": "bc7d9b9e-a17d-439d-8052-0e35b4a817c0" } ], "resourceVersion": "42399", "uid": "0b509010-d787-42a0-9346-086820bb0e64" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ee95c2ebdb0ff63884cbb5f1a170f2114ff6dd7128f83b029aa76ab0b492bdb" }, "subjects": [ { "kind": "ServiceAccount", "name": "default", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:23Z", "name": "marketplace-operator", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1372", "uid": "5bdd214b-67ab-45a0-892c-5d7430d60edf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "marketplace-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "marketplace-operator", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:24:17Z", "name": "openshift-marketplace-metrics", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "10815", "uid": "1e1ce94c-db46-4afc-bba5-8019e2f2db4d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-marketplace-metrics" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:deployers", "namespace": "openshift-marketplace", "resourceVersion": "23116", "uid": "4704b52f-c84c-4adb-a607-6e7f9213b9fc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-marketplace", "resourceVersion": "23230", "uid": "2fe41dbc-900c-4a98-9b0f-69fd8ae24dea" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-pullers", "namespace": "openshift-marketplace", "resourceVersion": "23060", "uid": "e4ad94f3-bb85-45db-8d9f-53b354e6f3f5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-marketplace" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:34:58Z", "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "alertmanager-prometheusk8s", "namespace": "openshift-monitoring", "resourceVersion": "23739", "uid": "823c1b60-c0c0-485b-a2da-5f2fed6a958b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "monitoring-alertmanager-edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:35Z", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1943", "uid": "00894cdc-17a6-4e9e-8d84-8fde1fd9ebaf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-monitoring-operator-namespaced" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:37Z", "name": "cluster-monitoring-operator-alert-customization", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2009", "uid": "7fb6a84b-bb1f-4039-b46d-301d96eb7f0e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "cluster-monitoring-operator-alert-customization" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "name": "console-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "2611", "uid": "2021858e-e38a-4f90-a411-8176bb7e9d62" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "console-operator" }, "subjects": [ { "kind": "ServiceAccount", "name": "console-operator", "namespace": "openshift-console-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:31Z", "name": "insights-operator-alertmanager", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1805", "uid": "b3c92e5d-1434-4f03-a09e-43f9ae0d05f8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "monitoring-alertmanager-edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator", "namespace": "openshift-insights" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:35:00Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "resourceVersion": "23994", "uid": "9ddf375e-e2b2-4ad0-ba7d-c730bce7068d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:35:00Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s-config", "namespace": "openshift-monitoring", "resourceVersion": "24009", "uid": "9605e19e-e01c-4503-9bc3-f15c124f20ce" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s-config" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:02:27Z", "labels": { "app.kubernetes.io/component": "segment-backup-installation", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/instance-namespace": "tssc-tas", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "segment-backup-nightly-metrics", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rhtas-segment-backup-job-tssc-tas", "namespace": "openshift-monitoring", "resourceVersion": "50773", "uid": "7460dd11-1fd3-4cf1-a2d3-68c61b298b50" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhtas-segment-backup-job-tssc-tas" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtas-segment-backup-job", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-monitoring", "resourceVersion": "23231", "uid": "0877feb7-ddc6-4083-84f2-1f85054d9d6e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-monitoring", "resourceVersion": "23205", "uid": "bd657064-0dc4-48a7-be66-03060f4e3d23" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-pullers", "namespace": "openshift-monitoring", "resourceVersion": "23062", "uid": "3317e88f-636e-48dd-b9e7-717021284882" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:30Z", "name": "multus-whereabouts", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "3955", "uid": "c21230ca-aedc-415c-83e7-06a4e1e0a33c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "whereabouts-cni" }, "subjects": [ { "kind": "ServiceAccount", "name": "multus-ancillary-tools", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:34Z", "name": "prometheus-k8s", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4073", "uid": "8447f5c0-4e6c-4705-9c9d-32e892bdfb02" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-multus", "resourceVersion": "23187", "uid": "5acbd8f0-c92c-422f-b1af-25d1db7fdb5a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-multus", "resourceVersion": "23186", "uid": "40a496b8-addc-4dec-a193-278beca428a4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-pullers", "namespace": "openshift-multus", "resourceVersion": "23089", "uid": "ab601ab5-cc7e-4427-b56c-9241be687ebe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-multus" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-network-console", "resourceVersion": "23288", "uid": "0fd68fcd-d1b7-4f87-bad7-5f92bf606f1e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-network-console", "resourceVersion": "23262", "uid": "098e8c24-5899-47ae-8ac1-511bcfafb30c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:55Z", "name": "system:image-pullers", "namespace": "openshift-network-console", "resourceVersion": "23061", "uid": "1343766c-eba6-46c0-a4e7-638010b9505f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-console" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:46Z", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4394", "uid": "ac99c80c-d87b-433e-ac3f-5aae092d0aee" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "network-diagnostics" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-diagnostics", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:47Z", "name": "prometheus-k8s", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4427", "uid": "a9ab4dc7-3f16-49f0-b19d-a1a9bc30a0d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-network-diagnostics", "resourceVersion": "23289", "uid": "a7aa1257-a39a-4d30-b7de-095626302c3d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-network-diagnostics", "resourceVersion": "23329", "uid": "70d69820-847d-471f-876c-4da811e3ae9d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-pullers", "namespace": "openshift-network-diagnostics", "resourceVersion": "23263", "uid": "074f299b-568a-410f-9fc8-c6854ad0cfbc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-diagnostics" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:49Z", "name": "network-node-identity-leases", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4496", "uid": "26d45ee6-a0ac-4f27-b264-3cf00d7b63d1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "network-node-identity-leases" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-node-identity", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-network-node-identity", "resourceVersion": "23290", "uid": "87b26366-6dba-44a9-b6ed-6487ac55495b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-network-node-identity", "resourceVersion": "23370", "uid": "9bcd5460-6002-444f-ad27-68f058c2b1a9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-pullers", "namespace": "openshift-network-node-identity", "resourceVersion": "23256", "uid": "810651c1-efb4-45ea-a9dc-db092c279b91" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:50Z", "name": "system:openshift:scc:hostnetwork-v2", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4502", "uid": "c6499fa3-ac9a-4dad-ba64-e69adad2047c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:openshift:scc:hostnetwork-v2" }, "subjects": [ { "kind": "ServiceAccount", "name": "network-node-identity", "namespace": "openshift-network-node-identity" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:32Z", "name": "prometheus-k8s", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1835", "uid": "8de1865b-09d8-4488-9182-464801c48905" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-network-operator", "resourceVersion": "23405", "uid": "3adcd832-6c76-4098-a198-5d70e2d52ea7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-network-operator", "resourceVersion": "23402", "uid": "bb00fbec-5342-495e-8854-0a55aafdbf8d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-pullers", "namespace": "openshift-network-operator", "resourceVersion": "23255", "uid": "a3656065-4355-418e-bb79-3364b87f7012" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-network-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:deployers", "namespace": "openshift-node", "resourceVersion": "23407", "uid": "e7002aa2-a917-4d70-9250-97c80532f316" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-builders", "namespace": "openshift-node", "resourceVersion": "23442", "uid": "e968aa10-47e7-418f-88b4-e9719038bcec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-pullers", "namespace": "openshift-node", "resourceVersion": "23261", "uid": "2d06a937-c7a8-46b3-99ee-99ba94db7f88" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-node" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:23:20Z", "name": "system:node-config-reader", "namespace": "openshift-node", "resourceVersion": "8019", "uid": "e8a8ae00-98fb-4d79-8e3b-2c15a4924d86" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:node-config-reader" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:36Z", "name": "host-networking-system-node", "namespace": "openshift-nutanix-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1980", "uid": "114f58dd-dc7a-4bed-93f0-429e1262d21c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-nutanix-infra", "resourceVersion": "23474", "uid": "61dbb069-8484-44c5-8b84-fbbd57145278" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-nutanix-infra", "resourceVersion": "23509", "uid": "b965c497-c452-444c-b797-cb240153a49d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:56Z", "name": "system:image-pullers", "namespace": "openshift-nutanix-infra", "resourceVersion": "23259", "uid": "59bde88c-0172-49f9-9fb5-ab244a28dd34" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-nutanix-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:23:30Z", "name": "prometheus-k8s", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "8576", "uid": "a43f33e7-beac-43cf-814f-66e464491d23" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-oauth-apiserver", "resourceVersion": "23470", "uid": "cbb4d647-dcf2-46be-ac1e-9a19faa47759" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-oauth-apiserver", "resourceVersion": "23527", "uid": "21566e0a-eae3-4448-bfab-0b5dac404e0e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-oauth-apiserver", "resourceVersion": "23473", "uid": "f69208d2-a3d7-443a-b8b2-4b4a4cd241b8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-oauth-apiserver" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:34Z", "name": "host-networking-system-node", "namespace": "openshift-openstack-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1898", "uid": "df5d5006-1ad1-4b91-8f1f-16e5eacd68d3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-openstack-infra", "resourceVersion": "23528", "uid": "a6c50161-18c1-4e2d-85d4-478798f63dc0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-openstack-infra", "resourceVersion": "23558", "uid": "6209ace1-5f78-4961-96a1-894cc02c2710" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-openstack-infra", "resourceVersion": "23471", "uid": "27f0a348-0cc4-4842-80f8-7aad53a2f37e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-openstack-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:28Z", "name": "operator-controller-leader-election-rolebinding", "namespace": "openshift-operator-controller", "resourceVersion": "8497", "uid": "33f32094-ba89-42ad-9c66-06e4676d091c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-leader-election-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:29Z", "name": "operator-controller-manager-rolebinding", "namespace": "openshift-operator-controller", "resourceVersion": "8526", "uid": "b8bea828-7bc5-4f6b-a965-c7bc1070088e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-manager-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:30Z", "labels": { "control-plane": "operator-controller-controller-manager" }, "name": "operator-controller-metrics-monitor-rolebinding", "namespace": "openshift-operator-controller", "resourceVersion": "8572", "uid": "be1ccd56-6139-4dfd-bc90-995454b0e02a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-controller-metrics-monitor-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-operator-controller", "resourceVersion": "23570", "uid": "37bf1964-7317-4706-bd19-acfb87d731bb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-operator-controller", "resourceVersion": "23585", "uid": "1d9ba4d6-0bc1-4c50-9eaf-ee46060275cd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-operator-controller", "resourceVersion": "23508", "uid": "3b66a253-b6b8-4fdc-895c-1f15ca68761a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operator-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:32Z", "name": "collect-profiles", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1845", "uid": "9c8ee515-2d5a-45dc-bf57-2881989b8580" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "collect-profiles" }, "subjects": [ { "kind": "ServiceAccount", "name": "collect-profiles", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:25Z", "name": "operator-lifecycle-manager-metrics", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1442", "uid": "2af3a5f5-22bd-4502-8354-31f4bc07c14d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "operator-lifecycle-manager-metrics" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:10Z", "labels": { "olm.managed": "true" }, "name": "packageserver", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "packageserver", "uid": "3e582b7e-5072-4cd6-ac18-2aa109a3ae07" } ], "resourceVersion": "10106", "uid": "0a835459-f116-4d04-8d61-398eb9d380da" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "packageserver" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:24:10Z", "labels": { "olm.managed": "true" }, "name": "packageserver-service-cert", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "packageserver", "uid": "54b6d99d-0652-464d-a23b-121576f63104" } ], "resourceVersion": "10191", "uid": "91a6f12b-4850-4589-b649-92f96250c040" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "packageserver-service-cert" }, "subjects": [ { "kind": "ServiceAccount", "name": "olm-operator-serviceaccount", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "23569", "uid": "68427b23-473f-464f-acf0-4544698f74f4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "23591", "uid": "2e98dea8-1ab5-4747-a3e2-6fd616a5622d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-operator-lifecycle-manager", "resourceVersion": "23505", "uid": "4abcb926-81ad-45d4-a766-07c5f3a45f1e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operator-lifecycle-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:57Z", "labels": { "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.20.2", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "5qt2C9TAjWEOtdnsrh8UtoY0nYNuadbK9QYNxI", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operato-5FrgLNMoL4i87aJPI5rSQFezftVolV0yFP3D3E", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "dca7d0df-37ff-4481-a438-1b57196c6778" } ], "resourceVersion": "44859", "uid": "5b35d8d6-3ef2-4da9-aaa7-d080530a230a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-operato-5FrgLNMoL4i87aJPI5rSQFezftVolV0yFP3D3E" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-operator-controller-manager", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:00Z", "labels": { "olm.managed": "true", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager-service-cert", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.20.2", "uid": "dca7d0df-37ff-4481-a438-1b57196c6778" } ], "resourceVersion": "44991", "uid": "dfa65ece-fd03-4e3f-b59c-ddbfc1b831de" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-operator-controller-manager-service-cert" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-operator-controller-manager", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:55Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator-prometheus", "namespace": "openshift-operators", "resourceVersion": "44623", "uid": "fdb22d3a-5046-4e89-bebe-8a7d4bacdd7d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-operator-prometheus" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:49Z", "labels": { "olm.managed": "true" }, "name": "openshift-gitops-operator.v1.20.2", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-gitops-operator.v1.20.2", "uid": "34b4dbe2-bfee-4e3d-9e20-516cf5d83ffb" } ], "resourceVersion": "44324", "uid": "184cb619-24ae-48e5-93cc-3148b7cc784a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-gitops-operator.v1.20.2" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-gitops-operator-controller-manager" }, { "kind": "ServiceAccount", "name": "openshift-gitops-operator-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:58Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-prometheus-k8s-read-binding", "namespace": "openshift-operators", "resourceVersion": "44739", "uid": "10dff916-9da0-4c8c-8421-7c086b81264f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-pipelines-operator-read" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:58Z", "labels": { "olm.managed": "true" }, "name": "openshift-pipelines-operator-rh.v1.21.1", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "openshift-pipelines-operator-rh.v1.21.1", "uid": "bfbd7c1d-9813-4231-bc25-2a06057a9bfc" } ], "resourceVersion": "44724", "uid": "a45935d9-bad3-49b0-9a18-a00d55360663" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-pipelines-operator-rh.v1.21.1" }, "subjects": [ { "kind": "ServiceAccount", "name": "openshift-pipelines-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:04Z", "labels": { "olm.managed": "true" }, "name": "rhdh-operator.v1.9.3", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhdh-operator.v1.9.3", "uid": "2ce174fc-701d-45cb-95fd-dbce50628630" } ], "resourceVersion": "45241", "uid": "2f65a169-7c1b-4f35-ad46-84e65348e428" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhdh-operator.v1.9.3" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhdh-controller-manager" }, { "kind": "ServiceAccount", "name": "rhdh-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:07Z", "labels": { "olm.managed": "true", "olm.owner": "rhdh-operator.v1.9.3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "6Rjvo2Z9QeedDa2NdNjcAiHP0v6y6Q7yV1uvEa", "operators.coreos.com/rhdh.openshift-operators": "" }, "name": "rhdh-operator.v1.9.3-rhd-8DSjXahW9xiG1gZ5ND4A5s0zLrishtwqU7tiCN", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhdh-operator.v1.9.3", "uid": "1e6f40b5-bc0a-4ad7-9b27-d2d6cca834bc" } ], "resourceVersion": "45888", "uid": "ec18410b-1d9e-4c63-9cdc-52eba48abb63" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhdh-operator.v1.9.3-rhd-8DSjXahW9xiG1gZ5ND4A5s0zLrishtwqU7tiCN" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhdh-controller-manager", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:40Z", "labels": { "olm.managed": "true" }, "name": "rhtas-operator.v1.3.4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtas-operator.v1.3.4", "uid": "d754bc28-30a5-4301-beaf-2048f9a251ed" } ], "resourceVersion": "43701", "uid": "722c7936-2c39-4a30-b4f1-78788657cdd5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhtas-operator.v1.3.4" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtas-operator-controller-manager" }, { "kind": "ServiceAccount", "name": "rhtas-operator-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:46Z", "labels": { "olm.managed": "true", "olm.owner": "rhtas-operator.v1.3.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "olm.permissions.hash": "i7bTIKZBx8FqjvSrhZBs4xBUckmilYzg7RKFC", "operators.coreos.com/rhtas-operator.openshift-operators": "" }, "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtas-operator.v1.3.4", "uid": "1469c9e1-7ee0-4296-b5d1-d96bccba5f3b" } ], "resourceVersion": "44180", "uid": "b2c6eb6c-1af8-4048-a19f-a1000925d147" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhtas-operator.v1.3.4-rh-6jkXqEAFvzZGw4NCzsx1aZqPAnGtMfvcYMAjoa" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtas-operator-controller-manager", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-operators", "resourceVersion": "23614", "uid": "a842e3ba-404d-4529-9b5a-d9138941a873" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-operators", "resourceVersion": "23645", "uid": "9defc346-94c5-4e3c-959a-5308e0997e9f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-operators", "resourceVersion": "23472", "uid": "63900793-2f2d-4b44-938c-b6fbc4bb27c6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-operators" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:01Z", "labels": { "app.kubernetes.io/instance": "default", "olm.managed": "true" }, "name": "tekton-operator-info", "namespace": "openshift-operators", "resourceVersion": "45050", "uid": "a3e233dd-655f-42fa-a6d4-1fb817e8aace" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-operator-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-ovirt-infra", "resourceVersion": "23589", "uid": "9cec8733-d3b1-4764-b123-781d5b80449e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-ovirt-infra", "resourceVersion": "23648", "uid": "f2feeb84-3105-4b71-a8c7-3400d8603bd1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-ovirt-infra", "resourceVersion": "23592", "uid": "8f22ca47-0dca-4832-a91a-2d107ad8016b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ovirt-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:41Z", "name": "openshift-ovn-kubernetes-control-plane-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4203", "uid": "823f71a7-f078-47d9-85b7-07ffc761df87" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-ovn-kubernetes-control-plane-limited" }, "subjects": [ { "kind": "ServiceAccount", "name": "ovn-kubernetes-control-plane", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:39Z", "name": "openshift-ovn-kubernetes-nodes-identity-limited", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4188", "uid": "d025f7c7-3ecb-4f36-9057-98ada4b9361f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-ovn-kubernetes-node-limited" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:ovn-nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:21:44Z", "name": "prometheus-k8s", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "de4b1cbb-d041-4a3c-aff1-19658628b88f" } ], "resourceVersion": "4253", "uid": "4d3977e8-98e3-42d0-ba1d-5240908ba292" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "23644", "uid": "298157dd-3183-40ef-bead-060f81f8af6a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-builders", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "23646", "uid": "845f583f-b053-42d1-97b0-ca6745ba6198" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-ovn-kubernetes", "resourceVersion": "23616", "uid": "c5c74400-0237-4ec9-a822-0f395c7790cf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-ovn-kubernetes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "dfb43f15a4d4725f26e68c9bf937df98c3facc2f9ebac9f09f8823b82ab763ca", "operator.tekton.dev/preserve-rb-subject-namespace": "true" }, "creationTimestamp": "2026-04-28T13:03:47Z", "name": "openshift-pipelines-prometheus-k8s-read-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-post-84nlx", "uid": "a14d3e87-5cf7-45d1-8873-25f21c27d2bc" } ], "resourceVersion": "52726", "uid": "fc1e4b2f-da7c-49c4-b499-252eeefc6f2c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "openshift-pipelines-read" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "bdf21fe7d8060ae809dd20bd2c0fdb91ff6f97b15a02744a15407e80dcf22604" }, "creationTimestamp": "2026-04-28T13:05:00Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5" }, "name": "pipelines-as-code-controller-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-l6hpk", "uid": "b8b047a6-b924-499f-b361-82cbb69aa5d5" } ], "resourceVersion": "54703", "uid": "4ad85a5f-e774-406e-ae73-8f171013e400" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-controller-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipelines-as-code-controller" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "69b269552a4f9908c77857d952909c3ebf6aa5174b4b6a4d52ecb640b10280b9" }, "creationTimestamp": "2026-04-28T13:05:00Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5" }, "name": "pipelines-as-code-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-l6hpk", "uid": "b8b047a6-b924-499f-b361-82cbb69aa5d5" } ], "resourceVersion": "54699", "uid": "dfbdc9fd-5031-41de-b504-c751c1771cf9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "a8e2b7951f59002cd8f613e9072f94f9902308a3921475de10bfc487870a8304" }, "creationTimestamp": "2026-04-28T13:05:00Z", "name": "pipelines-as-code-monitoring", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-l6hpk", "uid": "b8b047a6-b924-499f-b361-82cbb69aa5d5" } ], "resourceVersion": "54710", "uid": "f5321299-e052-4278-aca5-17710e89816a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-monitoring" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "dce7238e5b6fc52c3fc8228aa3334636766cb260b432f4a33999adddbae7e63a" }, "creationTimestamp": "2026-04-28T13:05:00Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5" }, "name": "pipelines-as-code-watcher-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-l6hpk", "uid": "b8b047a6-b924-499f-b361-82cbb69aa5d5" } ], "resourceVersion": "54707", "uid": "2e73fed6-19d8-4598-bd72-e059a6c2d012" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-watcher-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipelines-as-code-watcher" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "b7902cc3a8cbfc99964667c0dd25dd70f0f5609c566e07ceeeb2712c0025099f" }, "creationTimestamp": "2026-04-28T13:05:00Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5" }, "name": "pipelines-as-code-webhook-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-static-l6hpk", "uid": "b8b047a6-b924-499f-b361-82cbb69aa5d5" } ], "resourceVersion": "54708", "uid": "106b2f22-88e1-4c3a-b059-0639b20daec8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-webhook-role" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipelines-as-code-webhook" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:03:17Z", "name": "system:deployers", "namespace": "openshift-pipelines", "resourceVersion": "51627", "uid": "e47f9f95-241d-4777-92ff-fc60716ca3ec" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:03:17Z", "name": "system:image-builders", "namespace": "openshift-pipelines", "resourceVersion": "51628", "uid": "c2b1cbc5-b818-451a-9c2c-9372c23d6abe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:03:17Z", "name": "system:image-pullers", "namespace": "openshift-pipelines", "resourceVersion": "51635", "uid": "037b4bff-583d-420f-a7c1-51ef4a700772" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4af7c71be54e0175f5433efdef89ca4a034148f82d7e0adaf329f0d202537910" }, "creationTimestamp": "2026-04-28T13:04:09Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains" }, "name": "tekton-chains-controller-leaderelection", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-tb5w8", "uid": "702e4089-0efd-4c8e-b0de-7c98e7d6a3b9" } ], "resourceVersion": "53348", "uid": "9ed178b7-015c-48b9-9302-e9adbaf9c98c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-chains-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-chains-controller", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "b1bd894b510e11fd9553ce2043ac62a0f8807956a7542736cdcaf603e2517317" }, "creationTimestamp": "2026-04-28T13:04:09Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-chains" }, "name": "tekton-chains-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-tb5w8", "uid": "702e4089-0efd-4c8e-b0de-7c98e7d6a3b9" } ], "resourceVersion": "53349", "uid": "5f7da5b0-5c25-4932-8afe-7034721a7095" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-chains-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "d170fc445b1e8986e7e1971a803ffe599036e919482e9d78c8a914142b665b32" }, "creationTimestamp": "2026-04-28T13:04:42Z", "name": "tekton-default-openshift-pipelines-view", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-bfdrh", "uid": "220ea513-ed0f-4743-a1db-c1260b971427" } ], "resourceVersion": "54217", "uid": "87c41912-d5e7-4058-8eae-6fc8420986ed" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-default-openshift-pipelines-view" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"7cbaa5cf86114e948ad5df332c0fec93386e10700cb244550a8cab7c660897a5\"},\"name\":\"tekton-ecosystem-stepaction-list-binding\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolverstepactions-1.21-8sp7d\",\"uid\":\"e40d8465-9e86-4708-9587-866be6d90102\"}]},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"tekton-ecosystem-stepaction-list-role\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Group\",\"name\":\"system:authenticated\"}]}\n", "operator.tekton.dev/last-applied-hash": "7cbaa5cf86114e948ad5df332c0fec93386e10700cb244550a8cab7c660897a5" }, "creationTimestamp": "2026-04-28T13:04:40Z", "name": "tekton-ecosystem-stepaction-list-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolverstepactions-1.21-8sp7d", "uid": "e40d8465-9e86-4708-9587-866be6d90102" } ], "resourceVersion": "54307", "uid": "f8d8fd1c-ce93-43b3-b0b5-73945c025874" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-ecosystem-stepaction-list-role" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"rbac.authorization.k8s.io/v1\",\"kind\":\"RoleBinding\",\"metadata\":{\"annotations\":{\"operator.tekton.dev/last-applied-hash\":\"84448beff3b8141c2e3ca840d6370a2c9a2ed0f720f4ad12940c1f386b913b9e\"},\"name\":\"tekton-ecosystem-task-list-binding\",\"namespace\":\"openshift-pipelines\",\"ownerReferences\":[{\"apiVersion\":\"operator.tekton.dev/v1alpha1\",\"blockOwnerDeletion\":true,\"controller\":true,\"kind\":\"TektonInstallerSet\",\"name\":\"addon-versioned-resolvertasks-1.21-6929s\",\"uid\":\"1948d854-57ed-4a06-8623-b002a73bfe44\"}]},\"roleRef\":{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Role\",\"name\":\"tekton-ecosystem-task-list-role\"},\"subjects\":[{\"apiGroup\":\"rbac.authorization.k8s.io\",\"kind\":\"Group\",\"name\":\"system:authenticated\"}]}\n", "operator.tekton.dev/last-applied-hash": "84448beff3b8141c2e3ca840d6370a2c9a2ed0f720f4ad12940c1f386b913b9e" }, "creationTimestamp": "2026-04-28T13:04:39Z", "name": "tekton-ecosystem-task-list-binding", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-versioned-resolvertasks-1.21-6929s", "uid": "1948d854-57ed-4a06-8623-b002a73bfe44" } ], "resourceVersion": "54301", "uid": "3c0dc0aa-4f32-497e-8519-5a094fef4e8b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-ecosystem-task-list-role" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "4ce022c0a86311cc164c816b0046fe2a971b5df0fd7c8758aaedb31af9a7d331" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-events-controller-leaderelection", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52253", "uid": "8534ccc6-16c4-4d29-b76f-9ee597e27410" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-events-controller", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "fa2f4ed9a445a12906312c9a537df20c7239b30ad2dad3fe6ecfd9fd08892ca1" }, "creationTimestamp": "2026-04-28T13:03:28Z", "name": "tekton-operators-proxy-webhook-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52256", "uid": "68486634-495a-49da-b31d-e6e9913487c8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-operators-proxy-admin" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-operators-proxy-webhook", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "c76b3cedd2697078fa470b1c962f0602bf588760cadbb6ff19602920a189c08f" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52242", "uid": "ca664b6b-f4f9-44f8-8e32-fafd8b80beac" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "7d1959f609d359868777abd0d8ebbff9c8ceafa5d7ca8c91c148e1c1078513eb" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-controller-leaderelection", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52247", "uid": "52233055-b5ee-47ee-99ac-b235bfae3ebc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "7a71e4613b3a5ad6989ba8e8a1f8989b990e2b6aebc6016b9121b717f02f7c7e" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52251", "uid": "8fb7e64f-ccb4-4538-bfc4-537daeaa503f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-events-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-events-controller", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "d3a518f99dcd6a18a264f4f7bc2ed22622aed3f1a6fa504cd73d3de0715c2ffb" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52250", "uid": "b6bdc91d-3aca-4c8c-8a7c-aee19cf5a20b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "134d9fc8249ab732e665c4f78385f324b84bd86968057e10ac8df1f9fa930a2f" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-resolvers-namespace-rbac", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52254", "uid": "88cc321c-87fa-4997-876a-290ab181c75a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-resolvers-namespace-rbac" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-pipelines-resolvers", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "bbf2f00dc1c9a02a32209b1e169858584beb5c5739911a3e60d43abc2ff9f6af" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52244", "uid": "7c0bd27a-4671-4d8a-aa28-585a4d96b7ac" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-webhook" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "8bb4668d625d34b5891623c7fe7ac540901da676df1a47c955ce018596354c94" }, "creationTimestamp": "2026-04-28T13:03:27Z", "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-pipelines" }, "name": "tekton-pipelines-webhook-leaderelection", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-fw4sl", "uid": "1b19a7a3-1a5a-403a-aa24-bf5576bac72d" } ], "resourceVersion": "52248", "uid": "52ebd822-d830-4b1e-b42d-4421d6202e82" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-pipelines-leader-election" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "f56b0021454f4251bbe88381a961a880173355b9094cdf1091a8d676e896497c" }, "creationTimestamp": "2026-04-28T13:04:15Z", "labels": { "app.kubernetes.io/name": "tekton-results-info", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.17.2" }, "name": "tekton-results-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-cx9zq", "uid": "2899d166-2117-4ea6-a645-8bf92a91cd1e" } ], "resourceVersion": "53532", "uid": "cfe41631-5af8-46c1-8b80-128b53fcb6cc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-results-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "98abfa6d0c5fd6804579ce483d295e35a25d01b0a5241a9c3b81f1ba42f14470" }, "creationTimestamp": "2026-04-28T13:04:37Z", "name": "tekton-results-route-view-auth", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-post-52lrz", "uid": "a91bb8eb-4187-4914-ade4-1d351930960c" } ], "resourceVersion": "53987", "uid": "7fe671c8-c0c4-4246-b0a3-62463683cfab" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "tekton-results-route-view" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "124369a31bf467625c1ff5657b2b4357802c4d6c6391cb30b9753111d3c0e9d2" }, "creationTimestamp": "2026-04-28T13:03:50Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-v8d4c", "uid": "a63c7678-5741-4cda-b2c8-c60de887e65c" } ], "resourceVersion": "52881", "uid": "b70fb8d0-22dc-4bf9-99b9-3117da6b5629" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-triggers-core-interceptors" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "e80bea23c0415def5e67445b8fc3642135bb7453dabb3a0e031c09fe2236d2f0" }, "creationTimestamp": "2026-04-28T13:03:50Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers" }, "name": "tekton-triggers-info", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-v8d4c", "uid": "a63c7678-5741-4cda-b2c8-c60de887e65c" } ], "resourceVersion": "52885", "uid": "eb4e9e95-c214-484a-b2c4-39a41064302a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-triggers-info" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "6c6f932249d0aee68f276326169e4b3dc246f755c80c9d8c93fd8b462fc41ad3" }, "creationTimestamp": "2026-04-28T13:03:50Z", "labels": { "app.kubernetes.io/instance": "default", "app.kubernetes.io/part-of": "tekton-triggers" }, "name": "tekton-triggers-webhook-admin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-static-v8d4c", "uid": "a63c7678-5741-4cda-b2c8-c60de887e65c" } ], "resourceVersion": "52878", "uid": "9e68040c-b22a-4341-82e5-89d8f230bdd6" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tekton-triggers-admin-webhook" }, "subjects": [ { "kind": "ServiceAccount", "name": "tekton-triggers-webhook", "namespace": "openshift-pipelines" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:22:59Z", "name": "prometheus-k8s", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "6966", "uid": "e1f74491-317b-4432-9136-5cff97acce0c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-route-controller-manager", "resourceVersion": "23702", "uid": "37e15b87-02b9-4fb8-866b-563f3ee8728e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-builders", "namespace": "openshift-route-controller-manager", "resourceVersion": "23703", "uid": "c2c91daa-85a8-40be-85af-43f0de7dd1dc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-route-controller-manager", "resourceVersion": "23615", "uid": "aca2a23a-c2d1-493a-838c-20dad0ad5c69" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:23:01Z", "name": "system:openshift:leader-locking-openshift-route-controller-manager", "namespace": "openshift-route-controller-manager", "resourceVersion": "6512", "uid": "0b6c4feb-a60a-44d9-8305-6d518e1a1bb9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:leader-locking-openshift-route-controller-manager" }, "subjects": [ { "kind": "ServiceAccount", "name": "route-controller-manager-sa", "namespace": "openshift-route-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:19Z", "name": "prometheus-k8s", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1223", "uid": "126c165f-8aab-4294-9054-4dff2c754b57" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:deployers", "namespace": "openshift-service-ca-operator", "resourceVersion": "23734", "uid": "71a34ff9-c4b8-48a2-be64-6f22ad24dbd0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-builders", "namespace": "openshift-service-ca-operator", "resourceVersion": "23767", "uid": "29646cf9-616f-4234-afe0-184ed4b37f44" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-service-ca-operator", "resourceVersion": "23617", "uid": "e71a8b48-a1c1-49fc-868d-3a28417c85ef" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-service-ca-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:deployers", "namespace": "openshift-service-ca", "resourceVersion": "23679", "uid": "acdbe317-5c38-433d-95c5-90267133048e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-builders", "namespace": "openshift-service-ca", "resourceVersion": "23730", "uid": "0229ef3b-35d6-41b6-88c5-6ba50d5af26b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:57Z", "name": "system:image-pullers", "namespace": "openshift-service-ca", "resourceVersion": "23647", "uid": "043fa9c0-36cf-44fd-bb99-3a3d3a8a4f24" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:22:58Z", "name": "system:openshift:controller:service-ca", "namespace": "openshift-service-ca", "resourceVersion": "6085", "uid": "faf45231-d13f-48fd-a495-fac1d2e44697" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "system:openshift:controller:service-ca" }, "subjects": [ { "kind": "ServiceAccount", "name": "service-ca", "namespace": "openshift-service-ca" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:36Z", "name": "cluster-monitoring-operator", "namespace": "openshift-user-workload-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1969", "uid": "818e4f3b-07f1-477c-8581-fabc6273aebc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "cluster-monitoring-operator-namespaced" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:35:00Z", "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.5.0" }, "name": "prometheus-k8s", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "24001", "uid": "784b0602-5931-4908-b0c9-de240afa0ca2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "prometheus-k8s" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:deployers", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "23732", "uid": "b420dbbd-9dde-4e3c-84f2-4abf2ae7c68f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-builders", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "23747", "uid": "1441c4cd-07c7-4d78-9b41-8244068eacdb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-pullers", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "23704", "uid": "ab483271-43a7-4061-a3d7-9964bc26c586" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-user-workload-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:35Z", "name": "host-networking-system-node", "namespace": "openshift-vsphere-infra", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "1952", "uid": "5ae4be05-d3a2-4cd3-bc24-3f39d269073a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "host-networking-services" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:nodes" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:deployers", "namespace": "openshift-vsphere-infra", "resourceVersion": "23766", "uid": "e2eae19a-5c89-4ab3-ac5c-8b80ae8378ca" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-builders", "namespace": "openshift-vsphere-infra", "resourceVersion": "23765", "uid": "0cbfc12b-e7c3-4fdd-814f-7446ca52d8c4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:58Z", "name": "system:image-pullers", "namespace": "openshift-vsphere-infra", "resourceVersion": "23733", "uid": "1aa29b1b-cee0-4504-9729-5c03f5c6bf87" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift-vsphere-infra" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:23:33Z", "name": "cluster-samples-operator-openshift-edit", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "8829", "uid": "e3fc4c13-e238-4077-b922-16cd7fe713d5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:23:40Z", "name": "copied-csv-viewers", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "9193", "uid": "b2e49827-5d22-4b52-a274-5bfed7f05396" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "copied-csv-viewer" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "openshift-pipelines-edit", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51676", "uid": "6c386963-805c-4d50-974a-964959880bbe" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "f4b7515f77d6f86592e8b7c42b3fce77c4a46d8893fd314b454371ae797e1fbb" }, "creationTimestamp": "2026-04-28T13:05:17Z", "labels": { "app.kubernetes.io/part-of": "pipelines-as-code" }, "name": "pipelines-as-code-templates", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-post-dt57n", "uid": "b1cbe05a-7157-4609-9d19-ca879b32fd1d" } ], "resourceVersion": "55088", "uid": "2f012f12-1d0f-49d8-ac5e-5486b053cdba" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "pipelines-as-code-templates" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51674", "uid": "fc878c2c-71a4-45b4-848a-974e3e1689ad" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "rbac.authorization.kubernetes.io/autoupdate": "true" }, "creationTimestamp": "2026-04-28T12:23:20Z", "name": "shared-resource-viewers", "namespace": "openshift", "resourceVersion": "8009", "uid": "b5ed8119-7ef5-4670-b1de-7735b222c2c1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "shared-resource-viewer" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:deployers", "namespace": "openshift", "resourceVersion": "20842", "uid": "dacbcb75-fe83-44da-beb1-ab865ef04f48" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-builders", "namespace": "openshift", "resourceVersion": "20809", "uid": "9753bee9-2f9a-49d7-a5a0-b1eac4d78527" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:34:25Z", "name": "system:image-pullers", "namespace": "openshift", "resourceVersion": "20742", "uid": "489f01c6-ae50-4e4b-8bda-b26baf8184dd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:openshift" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "operator.tekton.dev/last-applied-hash": "492037ff111ec6c11cc50a3bd6e75092763295a1ae85f2158caa0ba8bfc3a5d2", "operator.tekton.dev/preserve-namespace": "true" }, "creationTimestamp": "2026-04-28T13:04:42Z", "name": "tekton-default-pipelines-view", "namespace": "openshift", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-pipelinestemplate-bfdrh", "uid": "220ea513-ed0f-4743-a1db-c1260b971427" } ], "resourceVersion": "54213", "uid": "eeb6928f-0aff-4c13-92de-3f3209c9f77b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "tekton-default-pipelines-view" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:authenticated" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "rhbk-operator", "resourceVersion": "42002", "uid": "1a114e41-f7be-45e5-9ec1-3a1435fc663a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "openshift-pipelines-edit", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51684", "uid": "06c81f27-a5ee-46a8-993c-b4e1a8408b65" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51681", "uid": "72bb412f-419a-4123-8838-c8c81f018ab1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:33Z", "labels": { "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "rhbk-operator", "olm.permissions.hash": "4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt", "operators.coreos.com/rhbk-operator.rhbk-operator": "" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "885eae81-65df-4118-8bc7-adc738d99b21" } ], "resourceVersion": "43462", "uid": "ec20b60d-b1c4-4a30-aac8-62ddffbd3145" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhbk-operator", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:31Z", "labels": { "olm.managed": "true" }, "name": "rhbk-operator.v26.4.11-opr.1", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "ccf4d16c-6d1d-4e66-8889-5145e13d3bd9" } ], "resourceVersion": "43056", "uid": "aeca30c9-0069-4287-bc1f-484cae25a3ad" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhbk-operator.v26.4.11-opr.1" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhbk-operator" }, { "kind": "ServiceAccount", "name": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "rhbk-operator", "resourceVersion": "42271", "uid": "95e12bc3-d82c-4cb7-b6d6-2e408d96bb64" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "rhbk-operator", "resourceVersion": "42267", "uid": "0fb733a0-c1f5-4183-9ab3-7b845f6dbbd2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "rhbk-operator", "resourceVersion": "42281", "uid": "67d61626-c16a-4517-abad-d42e6be43d87" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "rhtpa-operator", "resourceVersion": "41956", "uid": "7d9fb25d-82f2-46ca-ab15-d54b19fb16fb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "openshift-pipelines-edit", "namespace": "rhtpa-operator", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51691", "uid": "9f445643-c29d-4584-9028-7cf672b31a2c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "rhtpa-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "rhtpa-operator", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51689", "uid": "7380771a-3978-435b-bb81-8cfed5b987a1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "rhtpa-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "rhtpa-operator", "resourceVersion": "42272", "uid": "90820205-e7d9-413e-b176-3c006e04c286" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "rhtpa-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "rhtpa-operator", "resourceVersion": "42269", "uid": "56d593c8-cfa8-4064-aebf-28cbc3ea7e15" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "rhtpa-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "rhtpa-operator", "resourceVersion": "42279", "uid": "48364375-5448-4c7b-b62a-ec260c922320" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:rhtpa-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "openshift-pipelines-edit", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51700", "uid": "b08123e2-378b-4633-8580-93e49c2f37c5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "trusted-artifact-signer" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51698", "uid": "ea36a153-45d3-41d4-947b-fdf1d4cd1ddf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "trusted-artifact-signer" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:51Z", "name": "system:deployers", "namespace": "trusted-artifact-signer", "resourceVersion": "44450", "uid": "8ccca641-74d9-4820-b67c-ba77ea27533f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "trusted-artifact-signer" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:51Z", "name": "system:image-builders", "namespace": "trusted-artifact-signer", "resourceVersion": "44451", "uid": "d85359c9-fdcf-4a2b-bb6b-b18c0abd8a99" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "trusted-artifact-signer" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:51Z", "name": "system:image-pullers", "namespace": "trusted-artifact-signer", "resourceVersion": "44448", "uid": "2e870cc4-7449-424c-8fe0-875c840f689e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:trusted-artifact-signer" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:29Z", "name": "openshift-pipelines-edit", "namespace": "tssc-app-ci", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55499", "uid": "566601a0-c896-4795-97a9-129ce5d6560d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-ci" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:29Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-app-ci", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55492", "uid": "9cb3f6f3-e1fc-4e56-9d1a-65ba5fde3fa5" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-ci" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:deployers", "namespace": "tssc-app-ci", "resourceVersion": "55477", "uid": "2e10a255-9d3f-44d5-85b7-c2516fa04321" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-app-ci" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-builders", "namespace": "tssc-app-ci", "resourceVersion": "55471", "uid": "ccd853ef-6f9f-4196-bb6d-0692029d78cc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-app-ci" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-pullers", "namespace": "tssc-app-ci", "resourceVersion": "55473", "uid": "31b4790a-d489-4df3-9fb4-bba16ab9221e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-app-ci" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-ci", "resourceVersion": "55514", "uid": "111d6e7c-e75a-46e6-bfc7-4edda55f25a8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-ci", "resourceVersion": "55540", "uid": "3bd958ea-27b9-4222-a2e7-6d6a09a5b387" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:30Z", "name": "openshift-pipelines-edit", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55515", "uid": "32eb1191-4c9d-4cd8-9398-137f44ccfd6e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-development" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:29Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55510", "uid": "fc7d8681-1dcb-4b08-a8af-4a80f4ce9b19" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-development" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:deployers", "namespace": "tssc-app-development", "resourceVersion": "55478", "uid": "a60cf009-ce38-4279-90cd-c7d452b088dc" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-app-development" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-builders", "namespace": "tssc-app-development", "resourceVersion": "55476", "uid": "637f0ca1-2753-4e57-aa04-c74e053f7dca" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-app-development" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-pullers", "namespace": "tssc-app-development", "resourceVersion": "55472", "uid": "7768e1e1-acf3-4550-8866-9d70b8664d3c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-app-development" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-development", "resourceVersion": "55530", "uid": "7092dbd8-346c-4c55-a557-31079d1e1fee" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-development", "resourceVersion": "55561", "uid": "9067fb5b-7c2f-4a81-9406-c82b2e98cefb" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:30Z", "name": "openshift-pipelines-edit", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55528", "uid": "29a36fa9-0c2f-4df4-aaa5-3948678271e7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-prod" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:30Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55522", "uid": "a3144953-ec06-4c8d-8726-874861a64370" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-prod" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:deployers", "namespace": "tssc-app-prod", "resourceVersion": "55475", "uid": "a1cbfa78-5843-46cd-b5ee-544866712876" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-app-prod" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-builders", "namespace": "tssc-app-prod", "resourceVersion": "55474", "uid": "470ef248-b039-4fba-8664-b4dee72313f4" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-app-prod" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-pullers", "namespace": "tssc-app-prod", "resourceVersion": "55483", "uid": "4d296254-372f-40df-8b26-ee9be4dcc3a9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-app-prod" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-prod", "resourceVersion": "55521", "uid": "f4c682f8-9dcb-433e-970a-146222ac11b7" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:30Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-prod", "resourceVersion": "55547", "uid": "f289ed50-2195-47ed-a904-3efd6f639add" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:30Z", "name": "openshift-pipelines-edit", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55546", "uid": "61697df9-135c-45fa-8d44-192358147b2b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-stage" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:05:30Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "55541", "uid": "2a70d750-fc29-4162-a016-60d1870e86cd" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-app-stage" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:deployers", "namespace": "tssc-app-stage", "resourceVersion": "55470", "uid": "cc80545b-1770-4d73-ba55-64311ce4c12e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-app-stage" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-builders", "namespace": "tssc-app-stage", "resourceVersion": "55481", "uid": "e7557fd5-9e67-4824-8056-844a0918bdf3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-app-stage" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T13:05:29Z", "name": "system:image-pullers", "namespace": "tssc-app-stage", "resourceVersion": "55459", "uid": "25043165-e9d6-4a89-a71e-2ffe6f6cc5df" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-app-stage" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:29Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-app-stage", "resourceVersion": "55456", "uid": "104f5081-4bd1-4f52-b38b-2322154a238c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T13:05:29Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-app-stage", "resourceVersion": "55468", "uid": "a2811ba5-3342-4968-bc1e-31714ac7cbda" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "tssc-dh", "resourceVersion": "41998", "uid": "5d47c147-c47d-42a9-9135-9e1c3d7a51d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "openshift-pipelines-edit", "namespace": "tssc-dh", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51717", "uid": "6fdcf11c-98c3-4b44-826f-c813ff97a55e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-dh" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-dh", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51713", "uid": "84cf417e-e295-449e-ac31-098fd2380d40" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-dh" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "tssc-dh", "resourceVersion": "42273", "uid": "03b09712-f4aa-4342-ad67-daca5cf53699" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-dh" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "tssc-dh", "resourceVersion": "42266", "uid": "b4176e16-70c6-43b1-8d71-2e383de2310b" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-dh" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "tssc-dh", "resourceVersion": "42277", "uid": "2fe067d4-8b41-4747-a764-670d70b4be26" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-dh" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "tssc-gitops", "resourceVersion": "42000", "uid": "409a6403-be32-4806-8d93-a45cc30825e2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "openshift-pipelines-edit", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51725", "uid": "c24545ef-f3bc-4f7b-8627-4a2ebe1118ad" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51723", "uid": "825b59b3-b47e-455f-af2a-1db82ee6a6a3" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "tssc-gitops", "resourceVersion": "42274", "uid": "1a3b3cf0-faa7-454b-b12d-80366632df51" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "tssc-gitops", "resourceVersion": "42278", "uid": "80c57acf-fcdf-4d60-b555-02aa1ef22e48" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "tssc-gitops", "resourceVersion": "42270", "uid": "31fd48d3-c784-43d1-b59a-6ef8250e0def" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:58Z", "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48388", "uid": "119e7b67-997e-42ce-b44c-bfe913169667" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-applicationset-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-applicationset-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:57Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48224", "uid": "1a54b8b1-0cab-482f-b93b-32d8c51532b0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-application-controller" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-application-controller", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:56Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-dex-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48186", "uid": "12ebf828-fa15-4a23-ac3b-1e16a19ac858" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-dex-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-dex-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:57Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-redis", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48262", "uid": "282d9d7e-c567-445a-86df-19a86fc31e67" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-redis" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-redis", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:57Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-redis-ha", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48251", "uid": "6af180c5-bbcf-4fdf-b361-f2a2d0056065" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-redis-ha" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-redis-ha", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "argocds.argoproj.io/name": "tssc-gitops", "argocds.argoproj.io/namespace": "tssc-gitops", "meta.helm.sh/release-name": "tssc-gitops", "meta.helm.sh/release-namespace": "tssc-gitops" }, "creationTimestamp": "2026-04-28T12:59:57Z", "labels": { "app.kubernetes.io/managed-by": "tssc-gitops", "app.kubernetes.io/name": "argocd-server", "app.kubernetes.io/part-of": "argocd" }, "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48242", "uid": "5ab636d5-a236-48b7-9255-f4890f0d44ca" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-argocd-server" }, "subjects": [ { "kind": "ServiceAccount", "name": "tssc-gitops-argocd-server", "namespace": "tssc-gitops" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:59:56Z", "name": "tssc-gitops-prometheus-k8s-read-binding", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "tssc-gitops", "uid": "77a52c47-4a89-4421-a512-36c0bb9d0fb2" } ], "resourceVersion": "48168", "uid": "f7c23a17-aee8-4b31-94ed-130f23652e6c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "tssc-gitops-read" }, "subjects": [ { "kind": "ServiceAccount", "name": "prometheus-k8s", "namespace": "openshift-monitoring" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "tssc-keycloak", "resourceVersion": "41959", "uid": "9f717119-e80f-4237-ad7c-4444f04e6963" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "openshift-pipelines-edit", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51734", "uid": "849b09c4-73ad-4a45-aab3-8396b11d9793" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-keycloak" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51730", "uid": "84dce9f6-b63e-486d-b4ec-954bf81776f0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-keycloak" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:33Z", "labels": { "olm.copiedFrom": "rhbk-operator", "olm.managed": "true", "olm.owner": "rhbk-operator.v26.4.11-opr.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-keycloak", "olm.permissions.hash": "4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt" }, "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhbk-operator.v26.4.11-opr.1", "uid": "6c61d8d8-5cf1-4c05-a683-7b058caad313" } ], "resourceVersion": "43175", "uid": "bc1bf981-a40a-4b7c-b66f-5fa248948e4d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhbk-operator.v26.4.11-o-8BEbl7VSay0u4CUNjsIHMYjNfbe63ygBx5JHHG" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhbk-operator", "namespace": "rhbk-operator" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "tssc-keycloak", "resourceVersion": "42276", "uid": "bd72ac06-2f4a-44f8-8bce-ae332652eea1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-keycloak" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "tssc-keycloak", "resourceVersion": "42284", "uid": "802574c9-3309-4dce-81cc-293dd4ee8d3c" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-keycloak" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "tssc-keycloak", "resourceVersion": "42268", "uid": "7a8a24e8-83c7-468a-8510-8b6fde2c47b0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-keycloak" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "tssc-tas", "resourceVersion": "41997", "uid": "fb643600-954e-41af-aa95-21d39e9ee4bf" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:02:28Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "ctlog-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "CTlog", "name": "trusted-artifact-signer", "uid": "9108d5a7-b741-4902-9bab-df86993dd622" } ], "resourceVersion": "50892", "uid": "f93ac928-b248-4f5f-9a29-1a07f36cbd1d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "ctlog-createtree-job" }, "subjects": [ { "kind": "ServiceAccount", "name": "ctlog-createtree-job", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "openshift-pipelines-edit", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51743", "uid": "2df665f8-1eaf-47cc-a1ef-b08d02646f43" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51740", "uid": "a240dad3-6e6f-4fea-94e4-563d2a8dd95d" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:02:29Z", "labels": { "app.kubernetes.io/component": "createtree", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "rekor-createtree-job", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Rekor", "name": "trusted-artifact-signer", "uid": "6c19c587-b6b6-49f2-8503-3fd4823788e8" } ], "resourceVersion": "51039", "uid": "744dcf10-2603-41d2-8ad5-220350df8f7a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rekor-createtree-job" }, "subjects": [ { "kind": "ServiceAccount", "name": "rekor-createtree-job", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "tssc-tas", "resourceVersion": "42292", "uid": "7d423e28-c3f8-4424-a224-909f5bd1a27a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "tssc-tas", "resourceVersion": "42283", "uid": "df88c123-9393-4bd5-99a1-c8ca62a06b0f" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "tssc-tas", "resourceVersion": "42275", "uid": "40919f3c-7862-452f-a958-812145f12735" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:02:28Z", "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer" }, "name": "trillian-logsigner", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "rhtas.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Trillian", "name": "trusted-artifact-signer", "uid": "ab18cbc4-e75a-482d-a141-99ac4d9c14d0" } ], "resourceVersion": "50860", "uid": "c331cae9-c811-4b89-ad9d-951e5fabca92" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "trillian-logsigner" }, "subjects": [ { "kind": "ServiceAccount", "name": "trillian-logsigner", "namespace": "tssc-tas" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:08Z", "name": "admin", "namespace": "tssc-tpa", "resourceVersion": "41938", "uid": "187f4fbf-32af-4db0-9fde-7c33795c98a1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "admin" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "User", "name": "kube:admin" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:20Z", "name": "openshift-pipelines-edit", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51760", "uid": "61ccbc36-3f20-473c-9823-b7ffb314a2ae" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51750", "uid": "3c2f4b46-fef0-441f-9ec1-ad855ab88b18" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:25Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator-bind-get-ingress", "namespace": "tssc-tpa", "resourceVersion": "42762", "uid": "df1c7820-de86-4e82-b528-1c76d2159ac2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "allow-get-ingress" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtpa-operator-controller-manager", "namespace": "placeholder" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:25Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator-bind-job", "namespace": "tssc-tpa", "resourceVersion": "42775", "uid": "b64f593f-0eed-41b5-ab88-3ecbfe01e079" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "role-job" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtpa-operator-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:25Z", "labels": { "olm.managed": "true" }, "name": "rhtpa-operator.v1.1.4", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v2", "blockOwnerDeletion": false, "controller": true, "kind": "OperatorCondition", "name": "rhtpa-operator.v1.1.4", "uid": "d8086739-c07b-4bdf-98ee-19143cfd40ba" } ], "resourceVersion": "42776", "uid": "09dee899-a003-4518-b58a-da01c7854b3e" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhtpa-operator.v1.1.4" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtpa-operator-controller-manager" }, { "kind": "ServiceAccount", "name": "rhtpa-operator-controller-manager" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T12:58:27Z", "labels": { "olm.managed": "true", "olm.owner": "rhtpa-operator.v1.1.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tssc-tpa", "olm.permissions.hash": "ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt", "operators.coreos.com/rhtpa-operator.tssc-tpa": "" }, "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "rhtpa-operator.v1.1.4", "uid": "ae380ccc-2b4e-4f91-958e-4ef8b422b521" } ], "resourceVersion": "43608", "uid": "4c5ed944-b86a-46c9-9201-a2ea79bd8691" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "Role", "name": "rhtpa-operator.v1.1.4-rh-9EPBNtJmIseN8im3zaeTeU1HSeu9dzpBfcfFBN" }, "subjects": [ { "kind": "ServiceAccount", "name": "rhtpa-operator-controller-manager", "namespace": "tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:deployers", "namespace": "tssc-tpa", "resourceVersion": "42308", "uid": "07376275-0941-42f5-8032-4b43ec399fa1" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-builders", "namespace": "tssc-tpa", "resourceVersion": "42282", "uid": "2a5ef3c8-b2ba-4853-bba7-03f0843796d9" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:58:15Z", "name": "system:image-pullers", "namespace": "tssc-tpa", "resourceVersion": "42280", "uid": "65c9cee0-8b86-45fd-a720-def4c1c54a32" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc-tpa" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:19Z", "name": "openshift-pipelines-edit", "namespace": "tssc", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51708", "uid": "2cc49f31-a49c-4d02-83e0-7fbeb730772a" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "edit" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "creationTimestamp": "2026-04-28T13:03:18Z", "name": "pipelines-scc-rolebinding", "namespace": "tssc", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "rhosp-rbac-x8q58", "uid": "b3701d7f-70e8-4428-ad8d-9b3c4936a497" } ], "resourceVersion": "51705", "uid": "04f00aec-45cf-4aa6-b0cd-32e301636641" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "pipelines-scc-clusterrole" }, "subjects": [ { "kind": "ServiceAccount", "name": "pipeline", "namespace": "tssc" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows deploymentconfigs in this namespace to rollout pods in this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:deployers", "namespace": "tssc", "resourceVersion": "40887", "uid": "33131c1a-1209-4652-b6d7-3176ba7be4b8" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:deployer" }, "subjects": [ { "kind": "ServiceAccount", "name": "deployer", "namespace": "tssc" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows builds in this namespace to push images to this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:image-builders", "namespace": "tssc", "resourceVersion": "40885", "uid": "a15e5ef7-8c5e-4a59-850f-002453b378d2" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-builder" }, "subjects": [ { "kind": "ServiceAccount", "name": "builder", "namespace": "tssc" } ] }, { "apiVersion": "rbac.authorization.k8s.io/v1", "kind": "RoleBinding", "metadata": { "annotations": { "openshift.io/description": "Allows all pods in this namespace to pull images from this namespace. It is auto-managed by a controller; remove subjects to disable." }, "creationTimestamp": "2026-04-28T12:57:53Z", "name": "system:image-pullers", "namespace": "tssc", "resourceVersion": "40884", "uid": "19712a4c-bc5f-452b-8c49-57f03c8705a0" }, "roleRef": { "apiGroup": "rbac.authorization.k8s.io", "kind": "ClusterRole", "name": "system:image-puller" }, "subjects": [ { "apiGroup": "rbac.authorization.k8s.io", "kind": "Group", "name": "system:serviceaccounts:tssc" } ] } ], "kind": "List", "metadata": { "resourceVersion": "" } }