{ "apiVersion": "v1", "items": [ { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:45Z", "generation": 1, "name": "openshift-cloud-network-config-controller-aws", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1020", "uid": "9575e444-c60b-4c8e-b587-f5bae48edc7a" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "ec2:DescribeInstances", "ec2:DescribeInstanceStatus", "ec2:DescribeInstanceTypes", "ec2:UnassignPrivateIpAddresses", "ec2:AssignPrivateIpAddresses", "ec2:UnassignIpv6Addresses", "ec2:AssignIpv6Addresses", "ec2:DescribeSubnets", "ec2:DescribeNetworkInterfaces" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:49Z", "generation": 1, "name": "openshift-cloud-network-config-controller-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1164", "uid": "ed19471d-e398-4a74-88b5-8c7e961af6a0" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Compute/virtualMachines/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Network/loadBalancers/backendAddressPools/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:42Z", "generation": 1, "name": "openshift-cloud-network-config-controller-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "828", "uid": "aba5bd8b-c949-4b48-8f80-54b569213e12" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "compute.instances.updateNetworkInterface", "compute.subnetworks.use", "compute.subnetworks.get", "compute.zoneOperations.get", "compute.instances.get" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:52Z", "generation": 1, "name": "openshift-cloud-network-config-controller-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1235", "uid": "ffed659e-6e63-48ef-ad3a-597b7e5c9142" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-cloud-network-config-controller" }, "serviceAccountNames": [ "cloud-network-config-controller" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:55Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1365", "uid": "6084d7ad-f44c-4df0-904a-216563df3278" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "s3:CreateBucket", "s3:DeleteBucket", "s3:PutBucketTagging", "s3:GetBucketTagging", "s3:PutBucketPublicAccessBlock", "s3:GetBucketPublicAccessBlock", "s3:PutEncryptionConfiguration", "s3:GetEncryptionConfiguration", "s3:PutLifecycleConfiguration", "s3:GetLifecycleConfiguration", "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:45Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1023", "uid": "5b414fda-dcb9-40ff-862a-69225428918e" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "dataPermissions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action" ], "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/write", "Microsoft.Storage/storageAccounts/delete", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Resources/tags/write", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write", "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.Network/privateDnsZones/write", "Microsoft.Network/privateDnsZones/join/action", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/write", "Microsoft.Network/privateDnsZones/virtualNetworkLinks/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/join/action" ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:49Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-gcs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1165", "uid": "2f5ddef7-672e-49c7-b15c-9544bbd475ff" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", "storage.buckets.list", "storage.buckets.createTagBinding", "storage.buckets.listEffectiveTags", "storage.objects.create", "storage.objects.delete", "storage.objects.get", "storage.objects.list", "resourcemanager.tagValueBindings.create", "resourcemanager.tagValues.get", "resourcemanager.tagValues.list" ], "skipServiceCheck": true }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" }, "serviceAccountNames": [ "cluster-image-registry-operator", "registry" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:52Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1245", "uid": "13199dd3-7f97-46c0-bdac-7740b33aaafd" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:54Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-ibmcos-powervs", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1338", "uid": "fc2d1bee-78f8-470b-a458-d91ca3f1e3ef" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "IBMCloudPowerVSProviderSpec", "policies": [ { "attributes": [ { "name": "serviceName", "value": "cloud-object-storage" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer", "crn:v1:bluemix:public:iam::::role:Operator", "crn:v1:bluemix:public:iam::::role:Editor", "crn:v1:bluemix:public:iam::::role:Administrator", "crn:v1:bluemix:public:iam::::serviceRole:Reader", "crn:v1:bluemix:public:iam::::serviceRole:Writer" ] }, { "attributes": [ { "name": "resourceType", "value": "resource-group" } ], "roles": [ "crn:v1:bluemix:public:iam::::role:Viewer" ] } ] }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry+CloudCredential", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:53Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-image-registry-openstack", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1307", "uid": "a466082d-7241-4e4e-a2a9-a897bddefd3b" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "OpenStackProviderSpec" }, "secretRef": { "name": "installer-cloud-credentials", "namespace": "openshift-image-registry" } } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:45Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1019", "uid": "2a95a1af-9991-4538-9a89-ec52d41d77a6" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AWSProviderSpec", "statementEntries": [ { "action": [ "elasticloadbalancing:DescribeLoadBalancers", "route53:ListHostedZones", "route53:ListTagsForResources", "route53:ChangeResourceRecordSets", "tag:GetResources", "sts:AssumeRole" ], "effect": "Allow", "resource": "*" } ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:49Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-azure", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1174", "uid": "555b02d3-bc2d-4e20-a328-3a7770306de0" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "AzureProviderSpec", "permissions": [ "Microsoft.Network/dnsZones/A/delete", "Microsoft.Network/dnsZones/A/write", "Microsoft.Network/privateDnsZones/A/delete", "Microsoft.Network/privateDnsZones/A/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } }, { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "CredentialsRequest", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential+Ingress", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-05-07T15:24:52Z", "generation": 1, "labels": { "controller-tools.k8s.io": "1.0" }, "name": "openshift-ingress-gcp", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e4e596d5-e631-406d-815a-dd6b4b5dcba8" } ], "resourceVersion": "1238", "uid": "28d23208-bf65-4b1e-8d68-dbbb4c8c04af" }, "spec": { "providerSpec": { "apiVersion": "cloudcredential.openshift.io/v1", "kind": "GCPProviderSpec", "permissions": [ "dns.changes.create", "dns.resourceRecordSets.create", "dns.resourceRecordSets.update", "dns.resourceRecordSets.delete", "dns.resourceRecordSets.list" ] }, "secretRef": { "name": "cloud-credentials", "namespace": "openshift-ingress-operator" }, "serviceAccountNames": [ "ingress-operator" ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }