From 90caa0b2d855a3e420fddab9c11683068f34d92e Mon Sep 17 00:00:00 2001 From: YuChen Shen <59578388+YCShen1010@users.noreply.github.com> Date: Fri, 3 May 2024 00:03:21 -0400 Subject: [PATCH] update min rbac role yaml (#1967) Signed-off-by: YuChen --- .../common/nss-managed-bedrock-core-role.yaml | 3849 ++++++++--------- 1 file changed, 1716 insertions(+), 2133 deletions(-) diff --git a/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml b/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml index c0c115316..6fa6af344 100644 --- a/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml +++ b/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml @@ -4,2136 +4,1719 @@ metadata: name: nss-managed-role-from-operator_ns_to_replace namespace: ns_to_replace rules: -- apiGroups: - - k8s.keycloak.org - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - resources: - - keycloakrealmimports -- apiGroups: - - operator.ibm.com - verbs: - - create - - delete - - get - - list - - watch - - patch - resources: - - namespacescopes -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - configmaps/status - verbs: - - get - - patch - - update -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - - create - - delete - - get - - list - - patch - - watch -- apiGroups: - - "" - resources: - - pods - verbs: - - create - - delete - - get - - list - - patch - - watch -- apiGroups: - - "" - resources: - - pods/exec - verbs: - - create - - delete - - get - - list - - patch - - watch -- apiGroups: - - "" - resources: - - pods/status - verbs: - - get -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - secrets/status - verbs: - - get - - patch - - update -- apiGroups: - - "" - resources: - - serviceaccounts - verbs: - - create - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - verbs: - - get - - list - - update -- apiGroups: - - admissionregistration.k8s.io - resources: - - validatingwebhookconfigurations - verbs: - - get - - list - - update -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - get - - list - - update -- apiGroups: - - apps - resources: - - deployments - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - update -- apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - verbs: - - create - - delete - - get - - list - - patch - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - backups - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - backups/status - verbs: - - get - - patch - - update -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - clusters - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - clusters/finalizers - verbs: - - update -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - clusters/status - verbs: - - get - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - poolers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - poolers/finalizers - verbs: - - update -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - poolers/status - verbs: - - get - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - scheduledbackups - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - scheduledbackups/status - verbs: - - get - - patch - - update -- apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - verbs: - - create - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - verbs: - - create - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resourceNames: - - iaf-flink-operator-controller-manager-service-cert - resources: - - secrets - verbs: - - get -- apiGroups: - - "" - resources: - - configmaps - verbs: - - get - - list - - watch - - create - - update - - patch - - delete -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - list - - watch - - create - - update - - patch - - delete -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - apps - resources: - - deployments - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cert-manager.io - resources: - - certificates - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cert-manager.io - resources: - - issuers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - certificates - verbs: - - create - - delete - - deletecollection - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - issuers - verbs: - - create - - delete - - deletecollection - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - pods - verbs: - - delete - - get - - list - - watch -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - serviceaccounts - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - elastic.automation.ibm.com - resources: - - elasticsearches - verbs: - - get - - list - - watch -- apiGroups: - - elastic.automation.ibm.com - resources: - - elasticsearches/finalizers - verbs: - - update -- apiGroups: - - elastic.automation.ibm.com - resources: - - elasticsearches/status - verbs: - - patch - - update -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - networking.k8s.io - resources: - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - operandrequests - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create -- apiGroups: - - "" - resources: - - configmaps - verbs: - - get - - list - - watch - - create - - update - - patch - - delete -- apiGroups: - - apps - resources: - - deployments - verbs: - - get -- apiGroups: - - apps - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - list - - watch - - create - - update - - patch - - delete -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - apps - resources: - - controllerrevisions - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - - get -- apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - batch - resources: - - jobs/status - verbs: - - get -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events/status - verbs: - - get -- apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - pods/status - verbs: - - get -- apiGroups: - - "" - resources: - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - services/status - verbs: - - get -- apiGroups: - - extensions - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - extensions - resources: - - ingresses/status - verbs: - - get -- apiGroups: - - flink.automation.ibm.com - resources: - - flinkclusters - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - flink.automation.ibm.com - resources: - - flinkclusters/finalizers - verbs: - - update -- apiGroups: - - flink.automation.ibm.com - resources: - - flinkclusters/status - verbs: - - get - - patch - - update -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - serviceaccounts - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - networking.k8s.io - resources: - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cert-manager.io - resources: - - certificates - - issuers - verbs: - - create - - delete - - get - - list - - watch -- apiGroups: - - apps - resources: - - deployments - - statefulsets - - daemonsets - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - commonservices - - commonservices/finalizers - - commonservices/status - - operandconfigs - - operandregistries - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operators.coreos.com - resources: - - subscriptions - - clusterserviceversions - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - namespaces - verbs: - - get -- apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - delete -- apiGroups: - - "" - resources: - - secrets - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - patch - - update -- apiGroups: - - certmanager.k8s.io - resources: - - certificates - - issuers - verbs: - - delete -- apiGroups: - - monitoring.operator.ibm.com - resources: - - exporters - - prometheusexts - verbs: - - delete -- apiGroups: - - operator.ibm.com - resources: - - operandrequests - - operandbindinfos - - cataloguis - - helmapis - - helmrepos - verbs: - - delete -- apiGroups: - - elasticstack.ibm.com - resources: - - elasticstacks - verbs: - - delete -- apiGroups: - - "" - resourceNames: - - ibm-common-service-operator-service-cert - resources: - - secrets - verbs: - - get -- apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -- apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes/status - verbs: - - get - - list - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - - rolebindings - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - pods - - services - - services/finalizers - - configmaps - - secrets - - serviceaccounts - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - daemonsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create -- apiGroups: - - apps - resourceNames: - - common-webui - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - "" - resources: - - pods - verbs: - - get -- apiGroups: - - apps - resources: - - replicasets - - deployments - - statefulsets - verbs: - - get - - list -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - commonservices - verbs: - - get - - list -- apiGroups: - - operators.ibm.com - resources: - - commonwebuis - - commonwebuis/finalizers - - commonwebuis/status - - switcheritems - - switcheritems/finalizers - - switcheritems/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - foundation.ibm.com - resources: - - navconfigurations - - navconfigurations/finalizers - - navconfigurations/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - certificates - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cert-manager.io - resources: - - certificates - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - batch - resources: - - jobs - verbs: - - get -- apiGroups: - - operator.ibm.com - resources: - - operandrequests - verbs: - - delete - - get - - list -- apiGroups: - - "" - resourceNames: - - ibm-elastic-operator-controller-manager-service-cert - resources: - - secrets - verbs: - - get -- apiGroups: - - ibmevents.ibm.com - resources: - - kafkatopics - - kafkatopics/status - - kafkausers - - kafkausers/status - verbs: - - get - - list - - watch - - create - - patch - - update - - delete -- apiGroups: - - "" - resources: - - events - verbs: - - create -- apiGroups: - - "" - resources: - - secrets - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - operators.coreos.com - resources: - - subscriptions - verbs: - - get - - list -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create -- apiGroups: - - coordination.k8s.io - resourceNames: - - ibmevents-cluster-operator - resources: - - leases - verbs: - - get - - list - - watch - - delete - - patch - - update -- apiGroups: - - "" - resources: - - pods - verbs: - - watch - - list -- apiGroups: - - ibmevents.ibm.com - resources: - - kafkas - - kafkas/status - - kafkanodepools - - kafkanodepools/status - - kafkaconnects - - kafkaconnects/status - - kafkaconnectors - - kafkaconnectors/status - - kafkamirrormakers - - kafkamirrormakers/status - - kafkabridges - - kafkabridges/status - - kafkamirrormaker2s - - kafkamirrormaker2s/status - - kafkarebalances - - kafkarebalances/status - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - core.ibmevents.ibm.com - resources: - - strimzipodsets - - strimzipodsets/status - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - "" - resources: - - pods - - serviceaccounts - - configmaps - - services - - endpoints - - secrets - - persistentvolumeclaims - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - apps - resources: - - deployments - - deployments/scale - - deployments/status - - statefulsets - - replicasets - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - "" - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - build.openshift.io - resources: - - buildconfigs - - buildconfigs/instantiate - - builds - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - networking.k8s.io - resources: - - networkpolicies - - ingresses - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - image.openshift.io - resources: - - imagestreams - verbs: - - get -- apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - get - - list - - watch - - create - - delete - - patch - - update -- apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -- apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes/status - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - pods - - services - - services/finalizers - - endpoints - - persistentvolumeclaims - - events - - configmaps - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - daemonsets - - replicasets - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - oidc.security.ibm.com - resources: - - clients - - clients/finalizers - - clients/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create -- apiGroups: - - apps - resourceNames: - - ibm-iam-operator - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - "" - resources: - - pods - verbs: - - get -- apiGroups: - - apps - resources: - - replicasets - - deployments - verbs: - - get -- apiGroups: - - operator.ibm.com - resources: - - authentications - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - authentications/finalizers - verbs: - - update - - patch -- apiGroups: - - operator.ibm.com - resources: - - authentications/status - verbs: - - get - - patch - - update -- apiGroups: - - operator.ibm.com - resources: - - commonservices - verbs: - - get - - list -- apiGroups: - - cert-manager.io - resources: - - certificates - - certificaterequests - - orders - - challenges - - issuers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - certificates - verbs: - - delete - - get - - list - - watch -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - serviceaccounts - verbs: - - create - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - - rolebindings - verbs: - - create -- apiGroups: - - "" - resources: - - pods - - services - - services/finalizers - - serviceaccounts - - endpoints - - persistentvolumeclaims - - events - - configmaps - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - daemonsets - - replicasets - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create -- apiGroups: - - apps - resourceNames: - - ibm-mongodb-operator - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - operator.ibm.com - resources: - - mongodbs - - mongodbs/finalizers - - mongodbs/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - certificates - - certificaterequests - - orders - - challenges - - issuers - verbs: - - delete - - get - - list - - watch -- apiGroups: - - cert-manager.io - resources: - - certificates - - certificaterequests - - orders - - challenges - - issuers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - operandrequests - verbs: - - delete - - get - - list -- apiGroups: - - "" - - batch - - extensions - - apps - - policy - - rbac.authorization.k8s.io - - autoscaling - - route.openshift.io - - authorization.openshift.io - - networking.k8s.io - - metrics.k8s.io - - project.openshift.io - - template.openshift.io - - autoscaling.k8s.io - resources: - - pods - - pods/log - - pods/eviction - - poddisruptionbudgets - - projects - - secrets - - jobs - - configmaps - - deployments - - deployments/scale - - daemonsets - - statefulsets - - statefulsets/scale - - replicasets - - replicationcontrollers - - services - - services/finalizers - - persistentvolumes - - persistentvolumeclaims - - cronjobs - - pods/exec - - pods/portforward - - serviceaccounts - - namespaces - - roles - - rolebindings - - horizontalpodautoscalers - - verticalpodautoscalers - - routes - - routes/custom-host - - ingresses - - endpoints - - cronjob - - networkpolicies - - events - - jobs/status - - pods/status - - resourcequotas - - resourcequotas/status - - processedtemplates - verbs: - - create - - get - - delete - - watch - - update - - list - - patch - - deletecollection -- apiGroups: - - cpd.ibm.com - resources: - - cpdinstalls - - cpdinstalls/spec - - cpdinstalls/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - build.openshift.io - resources: - - buildconfigs - - buildconfigs/instantiate - - buildconfigs/instantiatebinary - - buildconfigs/webhooks - - buildlogs - - builds - - builds/clone - - builds/details - - builds/log - verbs: - - create - - delete - - list - - watch - - get - - patch - - update -- apiGroups: - - image.openshift.io - resources: - - imagestreams - - imagestreams/layers - - imagestreams/secrets - - imagestreams/status - - imagestreamimages - - imagestreamimports - - imagestreammappings - - imagestreamtags - verbs: - - create - - delete - - list - - watch - - get - - patch - - update -- apiGroups: - - apps - resourceNames: - - cpd-zen-operator - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - zen.cpd.ibm.com - resources: - - zenservice - - zenservices - - zenservice/status - - zenservices/status - - zenextension - - zenextensions - - zenextension/status - - zenextensions/status - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - commonservices - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - certmanager.k8s.io - resources: - - issuers - - issuers/status - - issuers/finalizers - - certificates - - certificates/status - - certificates/finalizers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cert-manager.io - resources: - - issuers - - issuers/status - - issuers/finalizers - - certificates - - certificates/status - - certificates/finalizers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - oidc.security.ibm.com - resources: - - client - - clients - verbs: - - create - - get - - list - - patch - - update - - watch - - delete -- apiGroups: - - operator.ibm.com - resources: - - operandrequest - - operandrequests - - operandbindinfo - - operandbindinfos - verbs: - - create - - get - - list - - patch - - update - - watch - - delete -- apiGroups: - - operators.coreos.com - resources: - - clusterserviceversions - verbs: - - get - - list - - watch -- apiGroups: - - operators.coreos.com - resources: - - operatorconditions - - operatorconditions/status - verbs: - - get - - list - - watch - - update - - patch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create -- apiGroups: - - ibm.com - resources: - - resourceplans - - resourcematches - verbs: - - get - - list - - watch - - update - - patch - - create - - delete - - deletecollection -- apiGroups: - - networking.k8s.io - resources: - - networkpolicies - verbs: - - create - - get - - list - - patch - - update - - watch - - delete -- apiGroups: - - postgresql.k8s.enterprisedb.io - resources: - - clusters - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operator.ibm.com - resources: - - operandconfigs - - operandconfigs/status - - operandconfigs/finalizers - - operandregistries - - operandregistries/status - - operandregistries/finalizers - - operandrequests - - operandrequests/status - - operandrequests/finalizers - - operandbindinfos - - operandbindinfos/status - - operandbindinfos/finalizers - - operatorconfigs - - operatorconfigs/status - - operatorconfigs/finalizers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - packages.operators.coreos.com - resources: - - packagemanifests - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - - services - - namespaces - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - operators.coreos.com - resources: - - operatorgroups - - installplans - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - k8s.keycloak.org - resources: - - keycloaks - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resourceNames: - - postgresql-operator-controller-manager-1-18-6-service-cert - resources: - - secrets - verbs: - - get -- apiGroups: - - snapshot.storage.k8s.io - resources: - - volumesnapshots - verbs: - - create - - get - - list - - patch - - watch -- apiGroups: - - ibm.com - resources: - - paralleljob - - paralleljobs - - paralleljob/status - - paralleljobs/status - verbs: - - get - - list -- apiGroups: - - tekton.dev - resources: - - taskrun/status - - taskrun - - taskruns/status - - taskruns - verbs: - - get - - list \ No newline at end of file + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - configmaps + - verbs: + - get + - patch + - update + apiGroups: + - '' + resources: + - configmaps/status + - verbs: + - create + - patch + apiGroups: + - '' + resources: + - events + - verbs: + - get + - list + - watch + apiGroups: + - '' + resources: + - namespaces + - verbs: + - get + - list + - watch + apiGroups: + - '' + resources: + - nodes + - verbs: + - create + - delete + - get + - list + - patch + - watch + apiGroups: + - '' + resources: + - persistentvolumeclaims + - verbs: + - create + - delete + - get + - list + - patch + - watch + apiGroups: + - '' + resources: + - pods + - verbs: + - create + - delete + - get + - list + - patch + - watch + apiGroups: + - '' + resources: + - pods/exec + - verbs: + - get + apiGroups: + - '' + resources: + - pods/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - secrets + - verbs: + - get + - patch + - update + apiGroups: + - '' + resources: + - secrets/status + - verbs: + - create + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - serviceaccounts + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - services + - verbs: + - get + - list + - patch + - update + apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - verbs: + - get + - list + - patch + - update + apiGroups: + - admissionregistration.k8s.io + resources: + - validatingwebhookconfigurations + - verbs: + - get + - list + - update + apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - apps + resources: + - deployments + - verbs: + - create + - delete + - get + - list + - patch + - watch + apiGroups: + - batch + resources: + - jobs + - verbs: + - create + - get + - update + apiGroups: + - coordination.k8s.io + resources: + - leases + - verbs: + - create + - delete + - get + - list + - patch + - watch + apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - policy + resources: + - poddisruptionbudgets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - backups + - verbs: + - get + - patch + - update + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - backups/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - clusters + - verbs: + - update + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - clusters/finalizers + - verbs: + - get + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - clusters/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - poolers + - verbs: + - update + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - poolers/finalizers + - verbs: + - get + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - poolers/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - scheduledbackups + - verbs: + - get + - patch + - update + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - scheduledbackups/status + - verbs: + - create + - get + - list + - patch + - update + - watch + apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - verbs: + - create + - get + - list + - patch + - update + - watch + apiGroups: + - rbac.authorization.k8s.io + resources: + - roles + - verbs: + - create + - get + - list + - patch + - watch + apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshots + - verbs: + - delete + - patch + apiGroups: + - '' + resources: + - configmaps + - verbs: + - create + - delete + - get + - list + - watch + - patch + apiGroups: + - operator.ibm.com + resources: + - namespacescopes + - verbs: + - create + - delete + - get + - list + - watch + apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + - verbs: + - get + - list + - patch + - update + - watch + apiGroups: + - apps + resources: + - deployments + - statefulsets + - daemonsets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - commonservices + - commonservices/finalizers + - commonservices/status + - operandconfigs + - operandregistries + - operatorconfigs + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operators.coreos.com + resources: + - subscriptions + - clusterserviceversions + - verbs: + - get + apiGroups: + - '' + resources: + - namespaces + - verbs: + - get + - list + - delete + apiGroups: + - '' + resources: + - pods + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - secrets + - services + - verbs: + - create + - get + - patch + - update + apiGroups: + - '' + resources: + - events + - verbs: + - delete + apiGroups: + - certmanager.k8s.io + resources: + - certificates + - issuers + - verbs: + - delete + apiGroups: + - monitoring.operator.ibm.com + resources: + - exporters + - prometheusexts + - verbs: + - delete + apiGroups: + - operator.ibm.com + resources: + - operandrequests + - operandbindinfos + - cataloguis + - helmapis + - helmrepos + - verbs: + - delete + apiGroups: + - elasticstack.ibm.com + resources: + - elasticstacks + - verbs: + - get + apiGroups: + - '' + resources: + - secrets + resourceNames: + - ibm-common-service-operator-service-cert + - verbs: + - get + - list + - watch + - create + - delete + - update + - patch + apiGroups: + - route.openshift.io + resources: + - routes + - verbs: + - create + apiGroups: + - route.openshift.io + resources: + - routes/custom-host + - verbs: + - get + - list + - watch + apiGroups: + - route.openshift.io + resources: + - routes/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - rbac.authorization.k8s.io + resources: + - roles + - rolebindings + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - pods + - services + - services/finalizers + - configmaps + - secrets + - serviceaccounts + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - apps + resources: + - deployments + - daemonsets + - verbs: + - get + - create + apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + - verbs: + - update + apiGroups: + - apps + resources: + - deployments/finalizers + resourceNames: + - common-webui + - verbs: + - get + apiGroups: + - '' + resources: + - pods + - verbs: + - get + - list + apiGroups: + - apps + resources: + - replicasets + - deployments + - statefulsets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - networking.k8s.io + resources: + - ingresses + - verbs: + - get + - list + apiGroups: + - operator.ibm.com + resources: + - commonservices + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operators.ibm.com + resources: + - commonwebuis + - commonwebuis/finalizers + - commonwebuis/status + - switcheritems + - switcheritems/finalizers + - switcheritems/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - foundation.ibm.com + resources: + - navconfigurations + - navconfigurations/finalizers + - navconfigurations/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - certmanager.k8s.io + resources: + - certificates + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - cert-manager.io + resources: + - certificates + - verbs: + - get + apiGroups: + - batch + resources: + - jobs + - verbs: + - delete + - get + - list + apiGroups: + - operator.ibm.com + resources: + - operandrequests + - verbs: + - get + - list + - watch + - create + - patch + - update + - delete + apiGroups: + - ibmevents.ibm.com + resources: + - kafkatopics + - verbs: + - get + - list + - watch + - create + - patch + - update + apiGroups: + - ibmevents.ibm.com + resources: + - kafkausers + - verbs: + - get + - patch + - update + apiGroups: + - ibmevents.ibm.com + resources: + - kafkatopics/status + - kafkausers/status + - verbs: + - create + apiGroups: + - '' + resources: + - events + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - '' + resources: + - secrets + - verbs: + - create + apiGroups: + - coordination.k8s.io + resources: + - leases + - verbs: + - get + - list + - watch + - delete + - patch + - update + apiGroups: + - coordination.k8s.io + resources: + - leases + resourceNames: + - ibmevents-cluster-operator + - verbs: + - watch + - list + apiGroups: + - '' + resources: + - pods + - verbs: + - get + - list + - watch + - create + - patch + - update + apiGroups: + - ibmevents.ibm.com + resources: + - kafkas + - kafkanodepools + - kafkaconnects + - kafkaconnectors + - kafkamirrormakers + - kafkabridges + - kafkamirrormaker2s + - kafkarebalances + - verbs: + - get + - patch + - update + apiGroups: + - ibmevents.ibm.com + resources: + - kafkas/status + - kafkanodepools/status + - kafkaconnects/status + - kafkaconnectors/status + - kafkamirrormakers/status + - kafkabridges/status + - kafkamirrormaker2s/status + - kafkarebalances/status + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - core.ibmevents.ibm.com + resources: + - strimzipodsets + - verbs: + - get + - patch + - update + apiGroups: + - core.ibmevents.ibm.com + resources: + - strimzipodsets/status + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - rbac.authorization.k8s.io + resources: + - roles + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - '' + resources: + - pods + - serviceaccounts + - configmaps + - services + - endpoints + - secrets + - persistentvolumeclaims + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - apps + resources: + - deployments + - statefulsets + - replicasets + - verbs: + - get + - patch + - update + apiGroups: + - apps + resources: + - deployments/scale + - verbs: + - create + apiGroups: + - '' + - events.k8s.io + resources: + - events + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - build.openshift.io + resources: + - buildconfigs + - buildconfigs/instantiate + - builds + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - networking.k8s.io + resources: + - networkpolicies + - ingresses + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + - verbs: + - get + apiGroups: + - image.openshift.io + resources: + - imagestreams + - verbs: + - get + - list + - watch + - create + - delete + - patch + - update + apiGroups: + - policy + resources: + - poddisruptionbudgets + - verbs: + - get + - list + - watch + - create + - delete + - update + - patch + apiGroups: + - route.openshift.io + resources: + - routes + - verbs: + - create + apiGroups: + - route.openshift.io + resources: + - routes/custom-host + - verbs: + - get + - list + - watch + apiGroups: + - route.openshift.io + resources: + - routes/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - pods + - services + - services/finalizers + - endpoints + - persistentvolumeclaims + - events + - configmaps + - secrets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - apps + resources: + - deployments + - daemonsets + - replicasets + - statefulsets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - oidc.security.ibm.com + resources: + - clients + - clients/finalizers + - clients/status + - verbs: + - get + - create + apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + - verbs: + - update + apiGroups: + - apps + resources: + - deployments/finalizers + resourceNames: + - ibm-iam-operator + - verbs: + - get + apiGroups: + - '' + resources: + - pods + - verbs: + - get + apiGroups: + - apps + resources: + - replicasets + - deployments + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - authentications + - verbs: + - update + - patch + apiGroups: + - operator.ibm.com + resources: + - authentications/finalizers + - verbs: + - get + - patch + - update + apiGroups: + - operator.ibm.com + resources: + - authentications/status + - verbs: + - get + - list + - create + apiGroups: + - operator.ibm.com + resources: + - commonservices + - verbs: + - create + - get + - list + - patch + - watch + - update + - delete + apiGroups: + - operator.ibm.com + resources: + - operandrequests + - verbs: + - watch + - get + - list + apiGroups: + - operator.ibm.com + resources: + - operandrequests/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - cert-manager.io + resources: + - certificates + - certificaterequests + - orders + - challenges + - issuers + - verbs: + - delete + - get + - list + - watch + apiGroups: + - certmanager.k8s.io + resources: + - certificates + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - networking.k8s.io + resources: + - ingresses + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - batch + resources: + - jobs + - verbs: + - create + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - serviceaccounts + - verbs: + - create + apiGroups: + - rbac.authorization.k8s.io + resources: + - roles + - rolebindings + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - pods + - services + - services/finalizers + - serviceaccounts + - endpoints + - persistentvolumeclaims + - events + - configmaps + - secrets + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - apps + resources: + - deployments + - daemonsets + - replicasets + - statefulsets + - verbs: + - get + - create + apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + - verbs: + - update + apiGroups: + - apps + resources: + - deployments/finalizers + resourceNames: + - ibm-mongodb-operator + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - mongodbs + - mongodbs/finalizers + - mongodbs/status + - verbs: + - delete + - get + - list + - watch + apiGroups: + - certmanager.k8s.io + resources: + - certificates + - certificaterequests + - orders + - challenges + - issuers + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - cert-manager.io + resources: + - certificates + - certificaterequests + - orders + - challenges + - issuers + - verbs: + - delete + - get + - list + apiGroups: + - operator.ibm.com + resources: + - operandrequests + - verbs: + - create + - get + - delete + - watch + - update + - list + - patch + - deletecollection + apiGroups: + - '' + - batch + - extensions + - apps + - policy + - rbac.authorization.k8s.io + - autoscaling + - route.openshift.io + - authorization.openshift.io + - networking.k8s.io + - metrics.k8s.io + - project.openshift.io + - template.openshift.io + - autoscaling.k8s.io + resources: + - pods + - pods/log + - pods/eviction + - poddisruptionbudgets + - projects + - secrets + - jobs + - configmaps + - deployments + - deployments/scale + - daemonsets + - statefulsets + - statefulsets/scale + - replicasets + - replicationcontrollers + - services + - services/finalizers + - persistentvolumes + - persistentvolumeclaims + - cronjobs + - pods/exec + - pods/portforward + - serviceaccounts + - namespaces + - roles + - rolebindings + - horizontalpodautoscalers + - verticalpodautoscalers + - routes + - routes/custom-host + - ingresses + - endpoints + - cronjob + - networkpolicies + - events + - jobs/status + - pods/status + - resourcequotas + - resourcequotas/status + - processedtemplates + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - cpd.ibm.com + resources: + - cpdinstalls + - cpdinstalls/spec + - cpdinstalls/status + - verbs: + - create + - delete + - list + - watch + - get + - patch + - update + apiGroups: + - build.openshift.io + resources: + - buildconfigs + - buildconfigs/instantiate + - buildconfigs/instantiatebinary + - buildconfigs/webhooks + - buildlogs + - builds + - builds/clone + - builds/details + - builds/log + - verbs: + - create + - delete + - list + - watch + - get + - patch + - update + apiGroups: + - image.openshift.io + resources: + - imagestreams + - imagestreams/layers + - imagestreams/secrets + - imagestreams/status + - imagestreamimages + - imagestreamimports + - imagestreammappings + - imagestreamtags + - verbs: + - update + apiGroups: + - apps + resources: + - deployments/finalizers + resourceNames: + - cpd-zen-operator + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - zen.cpd.ibm.com + resources: + - zenservice + - zenservices + - zenservice/status + - zenservices/status + - zenextension + - zenextensions + - zenextension/status + - zenextensions/status + - verbs: + - get + - list + apiGroups: + - ibm.com + resources: + - paralleljob + - paralleljobs + - paralleljob/status + - paralleljobs/status + - verbs: + - get + - list + apiGroups: + - tekton.dev + resources: + - taskrun + - taskruns + - taskrun/status + - taskruns/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - commonservices + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - certmanager.k8s.io + resources: + - issuers + - issuers/status + - issuers/finalizers + - certificates + - certificates/status + - certificates/finalizers + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - cert-manager.io + resources: + - issuers + - issuers/status + - issuers/finalizers + - certificates + - certificates/status + - certificates/finalizers + - verbs: + - create + - get + - list + - patch + - update + - watch + - delete + apiGroups: + - oidc.security.ibm.com + resources: + - client + - clients + - verbs: + - create + - get + - list + - patch + - update + - watch + - delete + apiGroups: + - operator.ibm.com + resources: + - operandrequest + - operandrequests + - operandbindinfo + - operandbindinfos + - verbs: + - get + - list + - watch + apiGroups: + - operators.coreos.com + resources: + - clusterserviceversions + - verbs: + - get + - list + - watch + - update + - patch + apiGroups: + - operators.coreos.com + resources: + - operatorconditions + - operatorconditions/status + - verbs: + - get + - create + apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + - verbs: + - get + - list + - watch + - update + - patch + - create + - delete + - deletecollection + apiGroups: + - ibm.com + resources: + - resourceplans + - resourcematches + - verbs: + - create + - get + - list + - patch + - update + - watch + - delete + apiGroups: + - networking.k8s.io + resources: + - networkpolicies + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - postgresql.k8s.enterprisedb.io + resources: + - clusters + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - '' + resources: + - configmaps + - namespaces + - secrets + - services + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - k8s.keycloak.org + resources: + - keycloakrealmimports + - keycloaks + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - operandbindinfos + - operandbindinfos/finalizers + - operandbindinfos/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - operandconfigs + - operandconfigs/finalizers + - operandconfigs/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - operandregistries + - operandregistries/finalizers + - operandregistries/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - operandrequests + - operandrequests/finalizers + - operandrequests/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operator.ibm.com + resources: + - operatorconfigs + - operatorconfigs/finalizers + - operatorconfigs/status + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operators.coreos.com + resources: + - clusterserviceversions + - subscriptions + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - operators.coreos.com + resources: + - installplans + - operatorgroups + - verbs: + - get + - list + - patch + - update + - watch + apiGroups: + - packages.operators.coreos.com + resources: + - packagemanifests + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + apiGroups: + - route.openshift.io + resources: + - routes + - verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - deletecollection + apiGroups: + - '*' + resources: + - '*' + - verbs: + - get + apiGroups: + - '' + resources: + - secrets + resourceNames: + - postgresql-operator-controller-manager-1-18-12-service-cert \ No newline at end of file