{ "apiVersion": "v1", "items": [ { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:27Z", "generation": 1, "name": "openshift-cloud-network-config-controller-aws", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1021", "uid": "622e037f-6e53-4374-93a6-cdbd883c9689" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "ec2:DescribeInstances", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DescribeSubnets", "ec2:DescribeNetworkInterfaces" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:30Z", "generation": 1, "name": "openshift-cloud-network-config-controller-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1129", "uid": "15ad504e-3c48-483e-8011-1bb8a28b69d8" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Compute/virtualMachines/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Network/loadBalancers/backendAddressPools/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:22Z", "generation": 1, "name": "openshift-cloud-network-config-controller-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "782", "uid": "9124dea6-54f7-49ba-97a6-bb8594668d70" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "compute.instances.updateNetworkInterface", "compute.subnetworks.use", "compute.subnetworks.get", "compute.zoneOperations.get", "compute.instances.get" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:33Z", "generation": 1, "name": "openshift-cloud-network-config-controller-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1214", "uid": "4073cb7f-77ec-4931-aaf1-92d5ef025ac9" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:36Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1316", "uid": "a24bbae8-10be-4f4b-9696-cffb7f74648d" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "s3:CreateBucket", "s3:DeleteBucket", "s3:PutBucketTagging", "s3:GetBucketTagging", "s3:PutBucketPublicAccessBlock", "s3:GetBucketPublicAccessBlock", "s3:PutEncryptionConfiguration", "s3:GetEncryptionConfiguration", "s3:PutLifecycleConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:26Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "965", "uid": "52d68a5c-ac68-4790-996f-89474e6523e8" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "dataPermissions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" ], "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/write", "Microsoft.Storage/storageAccounts/delete", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Resources/tags/write", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.Network/privateDnsZones/write", "Microsoft.Network/privateDnsZones/join/action", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/join/action" ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:29Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-gcs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1091", "uid": "10b3f6d4-4653-40e6-9a6a-ca5d5d61d642" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", "storage.buckets.list", "storage.buckets.createTagBinding", "storage.buckets.listEffectiveTags", "storage.objects.create", "storage.objects.delete", "storage.objects.get", "storage.objects.list", "resourcemanager.tagValueBindings.create", "resourcemanager.tagValues.get", "resourcemanager.tagValues.list" ], "skipServiceCheck": true }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:32Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1184", "uid": "3510b973-2d36-4d3d-9244-f9dc4df78d5e" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:35Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos-powervs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1267", "uid": "9f7fc809-fe76-4e6a-a9bb-9614ecf9691f" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudPowerVSProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:33Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1229", "uid": "1dc22d4a-45b9-40db-bdb1-32ca23a052e9" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:27Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1018", "uid": "5850085b-8875-4a9c-9997-cfb1412face7" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "elasticloadbalancing:DescribeLoadBalancers", "route53:ListHostedZones", "route53:ListTagsForResources", "route53:ChangeResourceRecordSets", "tag:GetResources", "sts:AssumeRole" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:30Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1131", "uid": "1893c215-bb27-46ce-bef3-a77f334a7002" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/dnsZones/A/delete", "Microsoft.Network/dnsZones/A/write", "Microsoft.Network/privateDnsZones/A/delete", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-27T03:02:33Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "20f2edfb-19fb-4e87-a045-9389ce0bd8f1" } ], "resourceVersion": "1225", "uid": "1a300914-a07a-4291-bfec-9c979d1c7e1e" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "dns.changes.create", "dns.resourceRecordSets.create", "dns.resourceRecordSets.update", "dns.resourceRecordSets.delete", "dns.resourceRecordSets.list" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }