{ "apiVersion": "v1", "items": [ { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:26Z", "generation": 1, "name": "openshift-cloud-network-config-controller-aws", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1174", "uid": "0e1db185-2d62-466e-b32a-abcf2e5f6885" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "ec2:DescribeInstances", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DescribeSubnets", "ec2:DescribeNetworkInterfaces" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:29Z", "generation": 1, "name": "openshift-cloud-network-config-controller-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1248", "uid": "03e71c00-89ac-4542-a976-3071835d4cde" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Compute/virtualMachines/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Network/loadBalancers/backendAddressPools/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:22Z", "generation": 1, "name": "openshift-cloud-network-config-controller-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1026", "uid": "7199b771-187f-4681-9023-91bddf2fd08d" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "compute.instances.updateNetworkInterface", "compute.subnetworks.use", "compute.subnetworks.get", "compute.zoneOperations.get", "compute.instances.get" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:30Z", "generation": 1, "name": "openshift-cloud-network-config-controller-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1291", "uid": "f5c0e445-0e31-4ac9-9e35-d3abdab12c34" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:32Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1368", "uid": "4a522b5f-4b90-4332-9c69-f2481cdb035b" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "s3:CreateBucket", "s3:DeleteBucket", "s3:PutBucketTagging", "s3:GetBucketTagging", "s3:PutBucketPublicAccessBlock", "s3:GetBucketPublicAccessBlock", "s3:PutEncryptionConfiguration", "s3:GetEncryptionConfiguration", "s3:PutLifecycleConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:22Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1025", "uid": "8645cb1d-1569-4249-8a6f-e05584d57081" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "dataPermissions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" ], "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/write", "Microsoft.Storage/storageAccounts/delete", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Resources/tags/write", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.Network/privateDnsZones/write", "Microsoft.Network/privateDnsZones/join/action", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/join/action" ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:26Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-gcs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1177", "uid": "fc86064c-f66f-483a-ab95-38d2049f65d0" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", "storage.buckets.list", "storage.buckets.createTagBinding", "storage.buckets.listEffectiveTags", "storage.objects.create", "storage.objects.delete", "storage.objects.get", "storage.objects.list", "resourcemanager.tagValueBindings.create", "resourcemanager.tagValues.get", "resourcemanager.tagValues.list" ], "skipServiceCheck": true }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:28Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1247", "uid": "e0b52247-28ee-4f59-bd13-a6621be8c4d8" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:31Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos-powervs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1339", "uid": "aeb34f2f-a655-4bb3-8534-38b68f81957e" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudPowerVSProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:30Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1290", "uid": "2f698814-c071-434e-9c42-9313f460d94f" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:22Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1027", "uid": "7e4cfcab-40c1-4310-b83a-4c92b84b77de" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "elasticloadbalancing:DescribeLoadBalancers", "route53:ListHostedZones", "route53:ListTagsForResources", "route53:ChangeResourceRecordSets", "tag:GetResources", "sts:AssumeRole" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:26Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1169", "uid": "2eddf88f-2ab4-4310-9479-0bc429f61a98" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/dnsZones/A/delete", "Microsoft.Network/dnsZones/A/write", "Microsoft.Network/privateDnsZones/A/delete", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-19T02:44:29Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "023ac250-710f-49ed-b9a2-19d79d02d640" } ], "resourceVersion": "1258", "uid": "7210d2ac-9803-40a5-a31b-a49761d092df" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "dns.changes.create", "dns.resourceRecordSets.create", "dns.resourceRecordSets.update", "dns.resourceRecordSets.delete", "dns.resourceRecordSets.list" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }