{ "apiVersion": "v1", "items": [ { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:14Z", "generation": 1, "name": "openshift-cloud-network-config-controller-aws", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1049", "uid": "e7416876-c360-42fc-86a4-6b740328b05d" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "ec2:DescribeInstances", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DescribeSubnets", "ec2:DescribeNetworkInterfaces" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:18Z", "generation": 1, "name": "openshift-cloud-network-config-controller-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1183", "uid": "50a542d5-3b73-4850-acdb-fc019286fb2a" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Compute/virtualMachines/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Network/loadBalancers/backendAddressPools/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:10Z", "generation": 1, "name": "openshift-cloud-network-config-controller-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "822", "uid": "d26b7d8a-00c1-4a86-91fb-b2a99f802e9e" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "compute.instances.updateNetworkInterface", "compute.subnetworks.use", "compute.subnetworks.get", "compute.zoneOperations.get", "compute.instances.get" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:21Z", "generation": 1, "name": "openshift-cloud-network-config-controller-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1263", "uid": "ff0fb9a5-9099-4db1-b9ae-fd91e7856cfa" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:23Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1345", "uid": "7e850513-28f7-4278-b9a1-234bccb0ea66" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "s3:CreateBucket", "s3:DeleteBucket", "s3:PutBucketTagging", "s3:GetBucketTagging", "s3:PutBucketPublicAccessBlock", "s3:GetBucketPublicAccessBlock", "s3:PutEncryptionConfiguration", "s3:GetEncryptionConfiguration", "s3:PutLifecycleConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:12Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "915", "uid": "27772ca6-8770-437e-89fc-8c65666a4b92" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "dataPermissions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" ], "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/write", "Microsoft.Storage/storageAccounts/delete", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Resources/tags/write", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.Network/privateDnsZones/write", "Microsoft.Network/privateDnsZones/join/action", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/join/action" ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:15Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-gcs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1097", "uid": "c28cca0c-b012-4d1e-9f58-2d43d36e9fb2" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", "storage.buckets.list", "storage.buckets.createTagBinding", "storage.buckets.listEffectiveTags", "storage.objects.create", "storage.objects.delete", "storage.objects.get", "storage.objects.list", "resourcemanager.tagValueBindings.create", "resourcemanager.tagValues.get", "resourcemanager.tagValues.list" ], "skipServiceCheck": true }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:19Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1214", "uid": "2934ba99-f69d-4bee-8a44-b0a612061db7" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:22Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos-powervs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1303", "uid": "09995169-e0a4-45c9-8163-a34f685d7f33" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudPowerVSProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:21Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1254", "uid": "20e51df0-6e9d-4f9d-a7b6-9a5392cf6a1b" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:14Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1051", "uid": "6bbfd297-6b09-4061-9c56-efb1bcfefd26" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "elasticloadbalancing:DescribeLoadBalancers", "route53:ListHostedZones", "route53:ListTagsForResources", "route53:ChangeResourceRecordSets", "tag:GetResources", "sts:AssumeRole" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:18Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1184", "uid": "a697b064-4227-4aa9-a605-3f17b374129c" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/dnsZones/A/delete", "Microsoft.Network/dnsZones/A/write", "Microsoft.Network/privateDnsZones/A/delete", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-07-02T02:04:21Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "557a9d25-bb0a-4f7e-8a1c-b7637d214e2e" } ], "resourceVersion": "1253", "uid": "fe3eec29-6126-4a56-bc10-7ab80a5359a6" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "dns.changes.create", "dns.resourceRecordSets.create", "dns.resourceRecordSets.update", "dns.resourceRecordSets.delete", "dns.resourceRecordSets.list" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }