IBM IAM v3.21.0¤

Install Modes¤

Mode	Supported
OwnNamespace	True
SingleNamespace	True
MultiNamespace	False
AllNamespaces	True

Service Accounts¤

No service accounts

Cluster Permissions¤

Group	Resource	Verbs
""	namespaces	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterroles	bind, create, delete, escalate, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterrolebindings	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterrolebindings/finalizers	create, delete, get, list, patch, update, watch
authorization.openshift.io	clusterrolebindings	create, delete, get, list, patch, update, watch
user.openshift.io	users	create, delete, get, list, patch, update, watch
user.openshift.io	groups	create, delete, get, list, patch, update, watch
user.openshift.io	identities	create, delete, get, list, patch, update, watch
oauth.openshift.io	oauthaccesstokens	create, delete, get, list, patch, update, watch
oauth.openshift.io	oauthclients	create, delete, get, list, patch, update, watch
iam.policies.ibm.com	iampolicies	create, delete, get, list, patch, update, watch
admissionregistration.k8s.io	mutatingwebhookconfigurations	create, delete, get, list, patch, update, watch

Namespace Permissions¤

Group	Resource	Verbs
""	pods	create, delete, get, list, patch, update, watch
""	services	create, delete, get, list, patch, update, watch
""	services/finalizers	create, delete, get, list, patch, update, watch
""	endpoints	create, delete, get, list, patch, update, watch
""	persistentvolumeclaims	create, delete, get, list, patch, update, watch
""	events	create, delete, get, list, patch, update, watch
""	configmaps	create, delete, get, list, patch, update, watch
""	secrets	create, delete, get, list, patch, update, watch
apps	deployments	create, delete, get, list, patch, update, watch
apps	daemonsets	create, delete, get, list, patch, update, watch
apps	replicasets	create, delete, get, list, patch, update, watch
apps	statefulsets	create, delete, get, list, patch, update, watch
apps	deployments/finalizers	update
oidc.security.ibm.com	clients	create, delete, get, list, patch, update, watch
oidc.security.ibm.com	clients/finalizers	create, delete, get, list, patch, update, watch
oidc.security.ibm.com	clients/status	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	roles	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	rolebindings	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	rolebindings/finalizers	create, delete, get, list, patch, update, watch
iam.policies.ibm.com	iampolicies	create, delete, get, list, patch, update, watch
authorization.openshift.io	rolebindings	create, delete, get, list, patch, update, watch
authorization.openshift.io	rolebindings/finalizers	create, delete, get, list, patch, update, watch
monitoring.coreos.com	servicemonitors	create, get
operator.ibm.com	*	create, delete, get, list, patch, update, watch
operator.ibm.com	policydecisions	create, delete, get, list, patch, update, watch
operator.ibm.com	oidcclientwatchers	create, delete, get, list, patch, update, watch
operator.ibm.com	authentications	create, delete, get, list, patch, update, watch
operator.ibm.com	policycontrollers	create, delete, get, list, patch, update, watch
operator.ibm.com	paps	create, delete, get, list, patch, update, watch
operator.ibm.com	securityonboardings	create, delete, get, list, patch, update, watch
certmanager.k8s.io	*	create, delete, get, list, patch, update, watch
certmanager.k8s.io	certificates	create, delete, get, list, patch, update, watch
networking.k8s.io	*	create, delete, get, list, patch, update, watch
networking.k8s.io	ingresses	create, delete, get, list, patch, update, watch
batch	jobs	create, delete, get, list, patch, update, watch