IBM Maximo Application Suite v8.11.17¤

Install Modes¤

Mode	Supported
OwnNamespace	True
SingleNamespace	True
MultiNamespace	False
AllNamespaces	False

Service Accounts¤

ibm-mas-config-editor
ibm-mas-config-reader
ibm-mas-coreapi
ibm-mas-coreidp
ibm-mas-entitymgr-addons
ibm-mas-entitymgr-bascfg
ibm-mas-entitymgr-coreidp
ibm-mas-entitymgr-idpcfg
ibm-mas-entitymgr-jdbccfg
ibm-mas-entitymgr-kafkacfg
ibm-mas-entitymgr-mongocfg
ibm-mas-entitymgr-objectstoragecfg
ibm-mas-entitymgr-pushcfg
ibm-mas-entitymgr-scimcfg
ibm-mas-entitymgr-slscfg
ibm-mas-entitymgr-smtpcfg
ibm-mas-entitymgr-watsonstudiocfg
ibm-mas-entitymgr-ws
ibm-mas-internalapi
ibm-mas-licensing-mediator
ibm-mas-mobileapi
ibm-mas-monagent-mas
ibm-mas-nopriv
ibm-mas-scim-agent

Cluster Permissions¤

Group	Resource	Verbs
""	configmaps	*, create, delete, get, list, patch, update, watch
""	secrets	*, create, delete, get, list, patch, update, watch
""	serviceaccounts	*, create, delete, get, list, patch, update, watch
""	pods	*, create, delete, get, list, patch, update, watch
""	pods/log	*, create, delete, get, list, patch, update, watch
""	services	*, create, delete, get, list, patch, update, watch
""	services/finalizers	*, create, delete, get, list, patch, update, watch
""	endpoints	*, create, delete, get, list, patch, update, watch
""	persistentvolumeclaims	*, create, delete, get, list, patch, update, watch
""	events	*, create, delete, get, list, patch, update, watch
""	namespaces	get
""	deploymentconfigs	create, delete, deletecollection, get, list, patch, update, watch
""	deploymentconfigs/scale	create, delete, deletecollection, get, list, patch, update, watch
""	pods/exec	*, create, delete, get, list, patch, update, watch
""	persistentvolumes	*, create, delete, get, list, patch, update, watch
""	roles	create, delete, get, list, patch, update, watch
""	rolebindings	create, delete, get, list, patch, update, watch
""	services/proxy	create, delete, get, list, patch, update, watch
""	certificates	get, list
rbac.authorization.k8s.io	rolebindings	*, create, delete, deletecollection, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterrolebindings	create, delete, deletecollection, get, list, patch, update, watch
rbac.authorization.k8s.io	roles	*, create, delete, deletecollection, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterroles	*, create, delete, deletecollection, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterroles/finalizers	*
apps	deployments	*, create, delete, get, list, patch, update, watch
apps	daemonsets	*, create, delete, get, list, patch, update, watch
apps	replicasets	*, create, delete, get, list, patch, update, watch
apps	statefulsets	*, create, delete, get, list, patch, update, watch
apps	deployments/finalizers	update
project.openshift.io	projects	*, create, get
operators.coreos.com	subscriptions	*, create, delete, get, list, patch, update
operators.coreos.com	installplans	create, delete, get, list, patch, update
operators.coreos.com	operatorgroups	*, create, delete, get, list, patch, update
operators.coreos.com	catalogsources	create, delete, get, list, patch, update
operators.coreos.com	clusterserviceversions	*, create, delete, get, list, patch, update
packages.operators.coreos.com	packagemanifests	get
apiextensions.k8s.io	customresourcedefinitions	*, create, delete, get, list, patch, update, watch
iot.ibm.com	iots	create, delete, get, list, patch, update, watch
iot.ibm.com	iotworkspaces	create, delete, get, list, patch, update, watch
iot.ibm.com	*	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	msoapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	msoworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	optimizerapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	optimizerworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	visualinspectionapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	visualinspectionappworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistbackups	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistbackups/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistbackups/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistrestores	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistrestores/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	assistrestores/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesapps	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesworkspaces	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	hputilitiesworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	healthworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managebuilds	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managebuilds/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managebuilds/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managedeployments	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managedeployments/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managedeployments/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageserverbundles	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageserverbundles/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	manageserverbundles/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	builddatainterpreters	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	builddatainterpreters/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	builddatainterpreters/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managestatuscheckers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managestatuscheckers/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	managestatuscheckers/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	monitorworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	msoapps/status	get, list, watch
apps.mas.ibm.com	msoapps/finalizers	get, list, watch
apps.mas.ibm.com	msoworkspaces/status	get, list, watch
apps.mas.ibm.com	msoworkspaces/finalizers	get, list, watch
apps.mas.ibm.com	optimizerapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	optimizerapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	optimizerworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	optimizerworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	predictworkspaces/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	safetys	get, list, watch
apps.mas.ibm.com	safetys/status	get, list, watch
apps.mas.ibm.com	safetys/finalizers	get, list, watch
apps.mas.ibm.com	safetyworkspaces	get, list, watch
apps.mas.ibm.com	safetyworkspaces/status	get, list, watch
apps.mas.ibm.com	safetyworkspaces/finalizers	get, list, watch
apps.mas.ibm.com	visualinspectionapps/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	visualinspectionapps/finalizers	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	visualinspectionappworkspaces/status	create, delete, get, list, patch, update, watch
apps.mas.ibm.com	visualinspectionappworkspaces/finalizers	create, delete, get, list, patch, update, watch
monitoring.coreos.com	servicemonitors	create, delete, get, list, patch, update, watch
monitoring.coreos.com	prometheusrules	create, delete, get, list, patch, update
mas.ibm.com	*	create, delete, get, list, patch, update, watch
batch	jobs	*
batch	cronjobs	*
route.openshift.io	routes	create, delete, deletecollection, get, list, patch, update, watch
route.openshift.io	routes/custom-host	create, delete, deletecollection, get, list, patch, update, watch
extensions	statefulsets	create, delete, deletecollection, patch, update
extensions	statefulsets/scale	create, delete, deletecollection, patch, update
extensions	daemonsets	create, delete, deletecollection, patch, update
extensions	deployments	create, delete, deletecollection, get, list, patch, update, watch
extensions	deployments/rollback	create, delete, deletecollection, patch, update
extensions	deployments/scale	create, delete, deletecollection, patch, update
extensions	ingresses	create, delete, deletecollection, get, list, patch, update, watch
extensions	networkpolicies	create, delete, deletecollection, patch, update
extensions	replicasets	create, delete, deletecollection, patch, update
extensions	replicasets/scale	create, delete, deletecollection, patch, update
extensions	replicationcontrollers/scale	create, delete, deletecollection, patch, update
networking.k8s.io	ingresses	create, delete, deletecollection, get, list, patch, update, watch
networking.k8s.io	networkpolicies	*, create, delete, deletecollection, get, list, patch, update, watch
apps.openshift.io	deploymentconfigs	create, delete, deletecollection, get, list, patch, update, watch
apps.openshift.io	deploymentconfigs/scale	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	certificates	*, create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	clusterissuers	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	clusterissuer	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	issuers	create, delete, get, list, patch, update, watch
integreatly.org	grafanadashboards	create, delete, get, list, patch, update, watch
monitoringcontroller.cloud.ibm.com	monitoringdashboards	create, delete, get, list, patch, update, watch
policy	poddisruptionbudgets	create, delete, deletecollection, get, list, patch, update, watch
authorization.openshift.io	clusterroles	create, delete, deletecollection, get, list, patch, update, watch
authorization.openshift.io	clusterrolebindings	create, delete, deletecollection, get, list, patch, update, watch
authorization.openshift.io	rolebindings	create, delete, deletecollection, get, list, patch, update, watch
authorization.openshift.io	roles	create, delete, deletecollection, get, list, patch, update, watch
iot.apps.mas.ibm.com	*	create, delete, get, list, patch, update, watch
binding.operators.coreos.com	servicebindings	*, create, delete, get, list, patch, update, watch
image.openshift.io	builds	create, delete, get, list, patch, update, watch
image.openshift.io	buildconfigs	create, delete, get, list, patch, update, watch
image.openshift.io	buildconfigs/instantiatebinary	create, delete, get, list, patch, update, watch
image.openshift.io	imagestreams	create, delete, get, list, patch, update, watch
image.openshift.io	imagestreamtags	create, delete, get, list, patch, update, watch
build.openshift.io	builds	create, delete, get, list, patch, update, watch
build.openshift.io	buildconfigs	create, delete, get, list, patch, update, watch
build.openshift.io	buildconfigs/instantiatebinary	create, delete, get, list, patch, update, watch
build.openshift.io	imagestreams	create, delete, get, list, patch, update, watch
build.openshift.io	imagestreamtags	create, delete, get, list, patch, update, watch
truststore-mgr.ibm.com	truststores	*, create, delete, get, list, patch, update, watch
truststore-mgr.ibm.com	truststores/status	create, delete, get, list, patch, update, watch
truststore-mgr.ibm.com	truststores/finalizers	create, delete, get, list, patch, update, watch
admissionregistration.k8s.io	validatingwebhookconfigurations	create, delete, get, list, patch, update
autoscaling	horizontalpodautoscalers	create, delete, deletecollection, get, list, patch, update
security.openshift.io	securitycontextconstraints	get, list, watch
asset-data-dictionary.ibm.com	assetdatadictionaries	*, get, list
asset-data-dictionary.ibm.com	assetdatadictionaries/status	*
asset-data-dictionary.ibm.com	assetdatadictionaries/finalizers	*
asset-data-dictionary.ibm.com	datadictionaryworkspaces	*, get, list
asset-data-dictionary.ibm.com	datadictionaryworkspaces/status	*
asset-data-dictionary.ibm.com	datadictionaryworkspaces/finalizers	*
core.mas.ibm.com	suites	get, list
core.mas.ibm.com	workspaces	get, list
addons.mas.ibm.com	mviedges	get, list
config.mas.ibm.com	jdbccfgs	get, list
config.mas.ibm.com	kafkacfgs	get, list
config.mas.ibm.com	mongocfgs	get, list
config.mas.ibm.com	objectstoragecfgs	get, list
config.mas.ibm.com	pushnotificationcfgs	get, list
config.mas.ibm.com	smtpcfgs	get, list
config.mas.ibm.com	watsonstudiocfgs	get, list
internal.mas.ibm.com	coreidps	get, list

Namespace Permissions¤

Group	Resource	Verbs
""	events	create, delete, get, list, patch, update, watch
""	secrets	create, delete, get, list, patch, update, watch
""	pods	create, delete, get, list, patch, update, watch
""	pods/exec	create, delete, get, list, patch, update, watch
""	pods/log	create, delete, get, list, patch, update, watch
""	configmaps	create, delete, get, list, patch, update, watch
""	services	create, delete, get, list, patch, update, watch
apps	deployments	create, delete, get, list, patch, update, watch
apps	daemonsets	create, delete, get, list, patch, update, watch
apps	replicasets	create, delete, get, list, patch, update, watch
apps	statefulsets	create, delete, get, list, patch, update, watch
batch	cronjobs	create, delete, get, list, patch, update, watch
batch	jobs	create, delete, get, list, patch, update, watch
route.openshift.io	routes	create, delete, deletecollection, get, list, patch, update, watch
route.openshift.io	routes/custom-host	create
route.openshift.io	routes/status	get, list, update, watch
networking.k8s.io	networkpolicies	create, delete, deletecollection, get, list, patch, update, watch
cert-manager.io	certificates	create, delete, get, list, patch, update, watch
cert-manager.io	clusterissuers	create, delete, get, list, patch, update, watch
cert-manager.io	issuers	create, delete, get, list, patch, update, watch
truststore-mgr.ibm.com	truststores	create, delete, get, list, patch, update, watch
truststore-mgr.ibm.com	truststores/status	get
operator.ibm.com	operandrequests	create, delete, get, list, patch, update, watch
binding.operators.coreos.com	servicebindings	create, delete, get, list, patch, update, watch
core.mas.ibm.com	suites	create, delete, get, list, patch, update, watch
core.mas.ibm.com	suites/status	create, delete, get, list, patch, update, watch
core.mas.ibm.com	workspaces	delete, get, list, watch
config.mas.ibm.com	*	create, delete, get, list, patch, update, watch
internal.mas.ibm.com	*	create, delete, get, list, patch, update, watch
addons.mas.ibm.com	*	delete, get, list, watch