Maximo Application Suite CLI Documentation Ansible CLI
Image Mirroring Install Update Upgrade Uninstall EAM Migration Mirror Db2 Images install update upgrade uninstall must-gather configure-airgap mirror-images mirror-redhat-images setup-registry teardown-registry provision-fyre provision-roks provision-rosa configtool-oidc Overview Nov 07 2024 Oct 03 2024 Aug 27 2024 Jul 30 2024 Dependencies Topology Cluster Extensions
Home Operator Catalog IBM Maximo Operator Catalog IBM IAM Operator v3.9.1 Install Modes Service Accounts Cluster Permissions Namespace Permissions

IBM IAM Operator v3.9.1¤

Install Modes¤

Mode Supported
OwnNamespace True
SingleNamespace True
MultiNamespace False
AllNamespaces True

Service Accounts¤

No service accounts

Cluster Permissions¤

Group Resource Verbs
"" namespaces create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io clusterroles bind, create, delete, escalate, get, list, patch, update, watch
rbac.authorization.k8s.io clusterrolebindings create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io clusterrolebindings/finalizers create, delete, get, list, patch, update, watch
authorization.openshift.io clusterrolebindings create, delete, get, list, patch, update, watch
user.openshift.io users create, delete, get, list, patch, update, watch
user.openshift.io groups create, delete, get, list, patch, update, watch
user.openshift.io identities create, delete, get, list, patch, update, watch
oauth.openshift.io oauthaccesstokens create, delete, get, list, patch, update, watch
oauth.openshift.io oauthclients create, delete, get, list, patch, update, watch
iam.policies.ibm.com iampolicies create, delete, get, list, patch, update, watch
admissionregistration.k8s.io mutatingwebhookconfigurations create, delete, get, list, patch, update, watch

Namespace Permissions¤

Group Resource Verbs
"" pods create, delete, get, list, patch, update, watch
"" services create, delete, get, list, patch, update, watch
"" services/finalizers create, delete, get, list, patch, update, watch
"" endpoints create, delete, get, list, patch, update, watch
"" persistentvolumeclaims create, delete, get, list, patch, update, watch
"" events create, delete, get, list, patch, update, watch
"" configmaps create, delete, get, list, patch, update, watch
"" secrets create, delete, get, list, patch, update, watch
apps deployments create, delete, get, list, patch, update, watch
apps daemonsets create, delete, get, list, patch, update, watch
apps replicasets create, delete, get, list, patch, update, watch
apps statefulsets create, delete, get, list, patch, update, watch
apps deployments/finalizers update
oidc.security.ibm.com clients create, delete, get, list, patch, update, watch
oidc.security.ibm.com clients/finalizers create, delete, get, list, patch, update, watch
oidc.security.ibm.com clients/status create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io roles bind, create, delete, escalate, get, list, patch, update, watch
rbac.authorization.k8s.io rolebindings create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io rolebindings/finalizers create, delete, get, list, patch, update, watch
iam.policies.ibm.com iampolicies create, delete, get, list, patch, update, watch
authorization.openshift.io rolebindings create, delete, get, list, patch, update, watch
authorization.openshift.io rolebindings/finalizers create, delete, get, list, patch, update, watch
monitoring.coreos.com servicemonitors create, get
operator.ibm.com * create, delete, get, list, patch, update, watch
operator.ibm.com policydecisions create, delete, get, list, patch, update, watch
operator.ibm.com oidcclientwatchers create, delete, get, list, patch, update, watch
operator.ibm.com authentications create, delete, get, list, patch, update, watch
operator.ibm.com policycontrollers create, delete, get, list, patch, update, watch
operator.ibm.com paps create, delete, get, list, patch, update, watch
operator.ibm.com securityonboardings create, delete, get, list, patch, update, watch
certmanager.k8s.io * create, delete, get, list, patch, update, watch
certmanager.k8s.io certificates create, delete, get, list, patch, update, watch
networking.k8s.io * create, delete, get, list, patch, update, watch
networking.k8s.io ingresses create, delete, get, list, patch, update, watch
batch jobs create, delete, get, list, patch, update, watch