IBM Cert Manager v4.2.19¶

Install Modes¶

Mode	Supported
OwnNamespace	False
SingleNamespace	False
MultiNamespace	False
AllNamespaces	True

Service Accounts¶

No service accounts

Cluster Permissions¶

Group	Resource	Verbs
""	configmaps	get, list
""	events	create, get, patch, update
""	pods	create, delete, get, list, watch
""	secrets	create, delete, get, list, patch, update, watch
""	serviceaccounts	create, delete, get, list, patch, update, watch
""	services	create, delete, get, list, update, watch
acme.cert-manager.io	challenges	create, delete, deletecollection, get, list, patch, update, watch
acme.cert-manager.io	orders	create, delete, deletecollection, get, list, patch, update, watch
acme.cert-manager.io	challenges/finalizers	update
acme.cert-manager.io	challenges/status	update
acme.cert-manager.io	orders/finalizers	update
acme.cert-manager.io	orders/status	update
admissionregistration.k8s.io	mutatingwebhookconfigurations	create, delete, get, list, patch, update, watch
admissionregistration.k8s.io	validatingwebhookconfigurations	create, delete, get, list, patch, update, watch
apiextensions.k8s.io	customresourcedefinitions	create, delete, get, list, patch, update, watch
apiregistration.k8s.io	apiservices	create, delete, get, list, patch, update, watch
apps	daemonsets	create, get, list, patch, update, watch
apps	deployments	create, delete, get, list, patch, update, watch
apps	statefulsets	create, get, list, patch, update, watch
auditregistration.k8s.io	auditsinks	get, list, update, watch
authorization.k8s.io	subjectaccessreviews	create
cert-manager.io	certificaterequests	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	certificaterequests/finalizers	update
cert-manager.io	certificaterequests/status	update
cert-manager.io	certificates	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	certificates/finalizers	update
cert-manager.io	certificates/status	get, patch, update
cert-manager.io	clusterissuers	get, list, update, watch
cert-manager.io	clusterissuers/status	update
cert-manager.io	issuers	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	issuers/finalizers	update
cert-manager.io	issuers/status	get, patch, update
cert-manager.io	signers	approve
certificates.k8s.io	certificatesigningrequests	get, list, update, watch
certificates.k8s.io	certificatesigningrequests/status	update
certificates.k8s.io	signers	sign
ibmcpcs.ibm.com	secretshares	create, get, list, watch
networking.k8s.io	httproutes	create, delete, get, list, update, watch
networking.k8s.io	ingresses	create, delete, get, list, update, watch
networking.k8s.io	ingresses/finalizers	update
networking.x-k8s.io	gateways	get, list, watch
networking.x-k8s.io	gateways/finalizers	update
networking.x-k8s.io	httproutes/finalizers	update
networking.x-k8s.io	httproutes	create, delete, get, list, update, watch
operator.ibm.com	certmanagerconfigs	create, delete, get, list, patch, update, watch
operator.ibm.com	certmanagerconfigs/finalizers	update
operator.ibm.com	certmanagerconfigs/status	get, patch, update
rbac.authorization.k8s.io	clusterrolebindings	create, delete, get, list, update, watch
rbac.authorization.k8s.io	clusterroles	create, delete, get, list, update, watch
rbac.authorization.k8s.io	rolebindings	create, delete, get, list, update, watch
rbac.authorization.k8s.io	roles	create, delete, get, list, update, watch
route.openshift.io	routes/custom-host	create

Namespace Permissions¶

Group	Resource	Verbs
""	configmaps	create, delete, get, list, patch, update, watch
""	events	create, patch
coordination.k8s.io	leases	create, delete, get, list, patch, update, watch