| "" | 
configmaps | 
get, list | 
| "" | 
events | 
create, get, patch, update | 
| "" | 
pods | 
create, delete, get, list, watch | 
| "" | 
secrets | 
create, delete, get, list, patch, update, watch | 
| "" | 
serviceaccounts | 
create, delete, get, list, patch, update, watch | 
| "" | 
services | 
create, delete, get, list, update, watch | 
| acme.cert-manager.io | 
challenges | 
create, delete, deletecollection, get, list, patch, update, watch | 
| acme.cert-manager.io | 
orders | 
create, delete, deletecollection, get, list, patch, update, watch | 
| acme.cert-manager.io | 
challenges/finalizers | 
update | 
| acme.cert-manager.io | 
challenges/status | 
update | 
| acme.cert-manager.io | 
orders/finalizers | 
update | 
| acme.cert-manager.io | 
orders/status | 
update | 
| admissionregistration.k8s.io | 
mutatingwebhookconfigurations | 
create, delete, get, list, patch, update, watch | 
| admissionregistration.k8s.io | 
validatingwebhookconfigurations | 
create, delete, get, list, patch, update, watch | 
| apiextensions.k8s.io | 
customresourcedefinitions | 
create, delete, get, list, patch, update, watch | 
| apiregistration.k8s.io | 
apiservices | 
create, delete, get, list, patch, update, watch | 
| apps | 
daemonsets | 
create, get, list, patch, update, watch | 
| apps | 
deployments | 
create, delete, get, list, patch, update, watch | 
| apps | 
statefulsets | 
create, get, list, patch, update, watch | 
| auditregistration.k8s.io | 
auditsinks | 
get, list, update, watch | 
| authorization.k8s.io | 
subjectaccessreviews | 
create | 
| cert-manager.io | 
certificaterequests | 
create, delete, deletecollection, get, list, patch, update, watch | 
| cert-manager.io | 
certificaterequests/finalizers | 
update | 
| cert-manager.io | 
certificaterequests/status | 
update | 
| cert-manager.io | 
certificates | 
create, delete, deletecollection, get, list, patch, update, watch | 
| cert-manager.io | 
certificates/finalizers | 
update | 
| cert-manager.io | 
certificates/status | 
get, patch, update | 
| cert-manager.io | 
clusterissuers | 
get, list, update, watch | 
| cert-manager.io | 
clusterissuers/status | 
update | 
| cert-manager.io | 
issuers | 
create, delete, deletecollection, get, list, patch, update, watch | 
| cert-manager.io | 
issuers/finalizers | 
update | 
| cert-manager.io | 
issuers/status | 
get, patch, update | 
| cert-manager.io | 
signers | 
approve | 
| certificates.k8s.io | 
certificatesigningrequests | 
get, list, update, watch | 
| certificates.k8s.io | 
certificatesigningrequests/status | 
update | 
| certificates.k8s.io | 
signers | 
sign | 
| ibmcpcs.ibm.com | 
secretshares | 
create, get, list, watch | 
| networking.k8s.io | 
httproutes | 
create, delete, get, list, update, watch | 
| networking.k8s.io | 
ingresses | 
create, delete, get, list, update, watch | 
| networking.k8s.io | 
ingresses/finalizers | 
update | 
| networking.x-k8s.io | 
gateways | 
get, list, watch | 
| networking.x-k8s.io | 
gateways/finalizers | 
update | 
| networking.x-k8s.io | 
httproutes/finalizers | 
update | 
| networking.x-k8s.io | 
httproutes | 
create, delete, get, list, update, watch | 
| operator.ibm.com | 
certmanagerconfigs | 
create, delete, get, list, patch, update, watch | 
| operator.ibm.com | 
certmanagerconfigs/finalizers | 
update | 
| operator.ibm.com | 
certmanagerconfigs/status | 
get, patch, update | 
| rbac.authorization.k8s.io | 
clusterrolebindings | 
create, delete, get, list, update, watch | 
| rbac.authorization.k8s.io | 
clusterroles | 
create, delete, get, list, update, watch | 
| rbac.authorization.k8s.io | 
rolebindings | 
create, delete, get, list, update, watch | 
| rbac.authorization.k8s.io | 
roles | 
create, delete, get, list, update, watch | 
| route.openshift.io | 
routes/custom-host | 
create |