IBM Maximo Application Suite v9.1.0¤
Release Notes¤
New Features¤
- Updating coreidp-login for MAS 9.1.x (#2867)
- Add support for s390x architecture (#3178)
- Add support for generic custom resource definition for operational addons (#3406)
- Add Power (ppc64le) support (#3638)
- Catalog Enhanced DR (#3706)
- Deprecate ReplicaDB CRD (#3710)
- removed user sync from assist (#3722)
- Catalog Addtional VPN (#3727)
- Catalog Java Extensions add-on using generic add-on mechanism (#3750)
- enable real-estate and facilities (#3579)
- Catalog add-on nonshared cluster (#3761)
- New Application Configuration operator (appcfg) (#3742)
- Adding support for OIDC (#3809)
Bug Fixes and Security Updates¤
- Update kubectl to major version - dev (#2873)
- Mobile update for 9.1 with new graphite version (#2879)
- Update mas/ansible-operator to v7.12.2 (dev) (#2872)
- provide graceful shutdown for api pods (#2881)
- added IDPCfg finalizer on suite (#2876)
- [MASCORE-2707] update mongo uris (#2889)
- Update all non-major dependencies (dev) (#2871)
- reverting requests lib upgrade (#2899)
- Switch kafka config to masdeps2 (#2903)
- Update Manage application versions (#2907)
- Adding arcgis and aibroker metadata (#2912)
- Fixing the issue where leading zeros in ids and usernames were getting removed when importing users through csv files (91x) (#2919)
- Correct core install cost to 0 for customer-managed (#2932)
- Fixing an issue in multiple SAML IDPs feature that happens when an IDP ID is part of other IDs (#2938)
- Updating importuser version to make sure it is using the latest version of ubi-python (and ubi-supervisor). (#2945)
- Update ibm-maximo-operator-catalog Docker tag to v9 (dev) (#2923)
- Updating coreapi with the new GET /applications/{appId}/componentsversions API (#2939)
- set users cost to 0 on non-prod catalogs (#2900)
- remove private keys from container after installtion (#2937)
- MAS Core UI admin-dashboard version updated (#2970)
- Update Internal Python Dependencies (dev) (#2942)
- Update mas/ansible-operator to v7.12.4 (dev) (#2931)
- Add Assist 9.1 to supported applications (#2986)
- reverting bad admin-dashboard image (#3006)
- Fixing an issue where duplicate entries in url arrays sent to liberty would cause the liberty API to fail (#3016)
- Forcing the use of the mapped property value if forceMappedValue is set in Scim CFG (#2995)
- Gracefully delete scimcfg with finalizer (#3028)
- IBMADD-74: Remove use of env vars for ADD (#3009)
- Add Optimizer 9.1 to app settings (#3033)
- Update mas/ansible-operator to v7.12.6 (dev) (#3020)
- Updating coreapi with the version that has request rate limits specifically for unauthenticated APIs. (#3045)
- Update Internal Python Dependencies (dev) (#3021)
- Avoid using regex in mongo query in coreapi's auth/permission check annotations (#3054)
- Adding null checks before accessing extension.userRef property of scim-owned users in scimsync-agent job (#3061)
- MASISMIG-57073 retrofitting spatial-esri changes to 91x (#3039)
- set region_name for cos verify [MASCORE-3629] (#3073)
- Updating internalapi with the new authservice APIs. (#3086)
- update mobileapi to 6.6.22 (#3081)
- [MASCORE-3641] fix perpetual license for accapppoints (#3094)
- Adding support for templateMode, defaultLanguage and disabledTemplates in SmtpCFG CR (#3093)
- fix MAS Trial User cleanup (#3103)
- update coreapi version (#3111)
- update mobileapi version (#3115)
- Update mas-utils to v7.15.2 (dev) (#3082)
- Update mas/ansible-operator to v7.12.9 (dev) (#3057)
- adding events to usage payload MASCORE-3620 (#3116)
- Licensing mediator version update (#3077)
- fix SLS in masdeps2 (#3160)
- Add translated email templates (#3159)
- MASCORE-2977 remove redundant code in certs.yml (#3162)
- Adding input validation for the 'PUT /authservice/users/{userId}/upsert' internal API, along with new unit tests and FVTs. (#3163)
- Adding new idpAdmin coreapi version. (#3165)
- [MASCORE-2878] MASCORE-4085 Resolve issues with update to Requests v2.32.3 (#3171)
- [MASCORE-2878] MASCORE-4085 Resolve issues with update to Req… (#3175)
- Fix supported version check in ibm-mas operator (#3143)
- Improve JDBCCfg verify error message (#2946)
- Update pymongo to v4.10.1 (dev) (#3144)
- Update Internal Python Dependencies (dev) (#3189)
- Update mas-smtp-client to v1.2.5 (dev) (#3190)
- validation fix in basclient (#3187)
- Fixing a runtime error in sendmailapi, a customer complaint in coreidp-login and changing the default for userDataPrivacyAccess in coreapi (#3206)
- Add missing case stage in travis (#3211)
- Update Internal Python Dependencies (dev) (#3195)
- adding customizable env var for custom login page (#3204)
- Primary email and phone numbers editable in the profile page (#3222)
- Fix LTPA Keys Generator multi-arch support (#3226)
- Update mas/ansible-operator to v7.12.11 (dev) (#3215)
- update mobileapi version (#3234)
- Rolling restart for catalog related pods when SaaS annotations change [MASCORE-3821] (#3231)
- updated coreapi version (#3242)
- update mobileapi version (#3243)
- Create platform specific catalog and suportedApplications, plus update adoptionusageapi version (#3244)
- Adding the new PUT /v1/authservice/applications/
/resyncusers API (#3248) - Restructure Travis config to use fewer concurrent jobs (#3261)
- Update mas-utils to v7.18.4 (dev) (#3249)
- Set catalog file checksum in catalog pods [MASCORE-4349] (#3255)
- Adding the PUT /users/resync API and fixing a runtime error in the GET /workspaces/workspaceId/users (#3273)
- Add missing podtemplate replica for entitymgrs [MASCORE-2752] (#3278)
- pns fix for DT398876-PNS-GRAPHITE-79482 (dev) (#3287)
- MAS 9.1 is compatibile with IOT 9.1 not IoT 8.8 (#3285)
- Reverted-PNS-DT398876-91 (maint91xdev) (#3293)
- Fix an FVT issue that was caused by an oversight in coreapi version (#3290)
- coreidp update to Java Semeru v17.0.13.0 to obtain ems support MASCORE-4462 (#3300)
- update mobileapi version (#3305)
- Update License files to include FT (#3299)
- update mobileapi version (#3307)
- Add support for the &delete=true query parameter in the upsert user internal API and adding a DELETE /authservice/users/{userId} internalapi (#3313)
- MASCORE-4545 concatenate strings safely for conditional (#3317)
- Fix runtime error in user sync, support for multiple ScimCFG CR, users/resync API path change, updating coreidp-login to the new build system (#3334)
- added rollback support for s390x for 9.1 (#3342)
- allow modification of driverOptions in JdbcCfg instances MASCORE-4325 (#3335)
- Fixing some remaining issues in the support for multiple ScimCFG instances (#3346)
- Updating coreapi for fvt issues (#3356)
- update admin-dashboard version (#3372)
- update admin dashboard version (revert) (#3374)
- Sync self registered users without auto admin approval only in Manage, so that admin approval can happen in Manage. (#3403)
- Address code smells in internal API (#3414)
- Update Suite CRD and deployments templates handled by the suite role to include hostAliases MASCORE-3387 (#3351)
- Black formatting & Flake8 findings in catalog and mobile APIs (#3416)
- Fix s390x cryptography package in licensing mediator (#3418)
- Fix the execution order of ibm-mas-cfg-idp molecule tasks (#3425)
- add supported images list in dev (#3435)
- update application settings for MVI 9.1 (#3437)
- Update applicationSettings.yml (#3436)
- add new line char (dev) (#3438)
- Collect pre-built wheels based on requirements file content (#3396)
- Improve performance of the /bulk/users/upsert API by 90% in certain conditions (#3444)
- Update podTemplates molecule test to include hostAliases setting (#3412)
- performance enhancements and multiple bug fixes for SCIM 2.0 integration (#3464)
- leverage pagination in users api MASCORE-5227 91x (#3459)
- Add reconcile period and retry logic on entitymgr-idpcfg (#3362)
- update mobileapi version : MAS-91 (#3477)
- Perfomance improvement and race condition fix for groupsync (#3481)
- add fix for LDAP connectivity failure after adding maxLdapRetries (#3484)
- Resolve SCIM 2.0 Extension attribute compatibility (#3497)
- Add skip arch build tags & resolve detect-secrets findings (#3505)
- Fix bascfg-reconcile namespace (#3511)
- Add ibm-mas-suite feb release into rollback supported images list (dev) (#3507)
- Updating core api version to 25.4.1 (#3515)
- coreapi version update 25.4.2 (#3518)
- Make sure existing user token is not replaced when payload user does not include the token (#3520)
- MASCORE-5506 - Modify Deployment template to remove unwanted IBM Licensing Service (#3535)
- admin-dashboard version update (#3561)
- [MASCORE-5815] suite adoption of OSDK v1.36+ (#3557)
- Fix phone number size limitation (#3562)
- change opaddon to genericaddon and add opaddon to rbac for internalapi (#3554)
-
- Remove RHM Catalog Sync Job Infrastructure For Existing Users (#3577)
- fix log for molecule test resources (#3570)
- MAS UI version update to include new common side nav and other fixes (#3553)
- fix detect secret issues (dev) (#3600)
- Sign images for 390x in correct order (#3594)
- Mount superuser secrets into internalapi pod (#3604)
- Making sure userSync is False for Optimizer (#3593)
- In authservice/users/
/upsert API, entitlement.admin derives from permissions.systemAdmin (#3623) - Fix bulk sendmail endpoint to also check for disabled email templates (#3621)
- Add 91-fc prev release into rollback supported images list (dev) (#3617)
- Fix building of ppc64le image rather than s390x (#3645)
- Support for IDP disable and visibility (#3644)
- fix adoptionusage api dashboard for multiple instances (#3642)
- retry to look up internalapi url from Suite CR status : dev (#3632)
- fixed accapppoints Indentation issue and updated facilities condition (#3650)
- [MASCORE-6141] readd python wheels to help speed up builds (#3647)
- rename adoptionusage-metering python filename as it was changed (#3654)
- Revert broken image of admindashboard (#3655)
- Fix addons regression issue (#3664)
- Added valuemetric for manage (#3666)
- Adding no_log for verify_jdbc module (#3580)
- resolving the conflict for cors (#3676)
- Add more generalization to GenericAddon, support addonType enum for GenericAddon (#3625)
- Hide applications section from old readonly user page (#3686)
- Build Optimization (#3677)
- Ensure slscfg EM digests are processed (#3702)
- Fix the metadata internalapi FVT failure. (#3704)
- Fix digest handling in s390x & ppc64le (#3705)
- Add support for password expiration (#3708)
- Update operator images and deployments to reflect the ubi-flask changes (#3542)
- Added CRD, operator, defaults and made deployment changes for IDP status change API (#3684)
- Add Qualtrics config GET and PUT APIs, and add qualtrics property to uiresources API response (#3735)
- Fix a molecule error, a syntax error in ldap.yml, and add comments explaining the changes in saml.yml (#3743)
- Set accapppoints cronjob suspend flag in CR (#3759)
- Cleanup User Sync Agent after RBAC is enabled in MVI - MASR-2974 (#3751)
- Add always block to help recover SAML flow when idpSaml is invalid (#3763)
- Change the /bulk/users/upsert API so that it upserts valid users and returns failed users in an array instead of failing the entire batch (#3753)
- Revert "Change the /bulk/users/upsert API so that it upserts valid users and returns failed users in an array instead of failing the entire batch" (#3764)
- fix issues in molecule test for generic addons (#3760)
- added yq error fix on build-pem.sh for power platform (#3772)
- Use Inventory Model To Get Catalog Accelerators (#3731)
- Update operand images to reflect ubi-flask changes (#3781)
- fix bug on reset password with password expiration support (#3782)
- Fix for 2 minor issues found in bulk user upsert internal API (#3789)
- set libery 25.0.0.2 into coreidp: dev (#3792)
- updates in copyright (#3805)
- MAS UI versions updated to include mas common shell and mas common nav fixes and admin updates related to Qualtrics, Usage dashboard and Assist renaming (#3757)
- Added maximo ai service Tile into catalog (#3779)
- Added certificate for workspace in Real Estate and Facilities (#3799)
- Update mobileapi version to 7.0.2 to include Navigator api changes (#3806)
- MAXUIF-1990 Adding Maintenance Cost Insights Tile for MAS (#3758)
- AppConfig updates (#3811)
- pull in coreapi with multiple changes (including new 'user-profile' application) (#3810)
- Add Accelerators to Catalog with Licence Mappings (#3788)
- Suite level Pricing (#3778)
- Fixing UI version for OIDC (#3827)
- added spaces, reservations and requests metrics for facilities app (#3830)
- Add missing implementation for configurable Filebeat output (#3728)
- Support for force logout (#3832)
- Add missing environment variable for mobileapi container (#3825)
- Revert failing mobile code (#3835)
- Fixing s390x coreidp-login image (#3836)
- Add 91-fc prev release into rollback supported images list (dev) (#3843)
- MAXMF-2305 Add MRO IO Back to MAS Catalog (#3807)
- Update versions to include password expiration and sendmail to facilities users work (#3853)
- Add missing environment variable for mobileapi container (#3838)
- Validate if user is active before checking credentials in the /v3/users/checkauthentication internal API (#3856)
- updated adoptionusagepai version to fix the logger issue (#3858)
- prevent side nav auto hide feature in admin dashboard (#3859)
- MASR-3826 Add AIP to MAS Catalog (#3808)
- Add internal cert for config in internal api (#3862)
- MAS UI images updated (#3863)
- add superuser creadentials volume mount to adoptionusage-reporter (#3860)
- update predict for 9.1 release (#3866)
- Fixing cors support for AWS proxy (#3876)
- show and hide behaviour for generic adons (#3871)
- remove hardcoded creds for MASCORE-6092 (#3723)
- Issue 1 from MSO-2061 fixing optimizer link from suite nav (#3878)
- Fix Real Estate and Facilities AppPoint costs (#3875)
- Updates to MREF pricing (#3880)
- Increase resources for JDBC entitymgr (#3884)
- update user value metrics on mref essential catalogs. (#3891)
- Adding Upgrade process to fix SaaS mode inconsistency with Admin not authorized users (#3893)
- Resolve 91 and 811 data upgrade conflict (#3902)
- Remove MVI 8.9 entries (#3889)
- Add 9.1 License file in readme (#3890)
- add 91 license urls (#3907)
- App config version update (#3908)
Install Modes¤
| Mode | Supported |
|---|---|
| OwnNamespace | True |
| SingleNamespace | True |
| MultiNamespace | False |
| AllNamespaces | False |
Service Accounts¤
- ibm-mas-config-editor
- ibm-mas-config-reader
- ibm-mas-coreapi
- ibm-mas-coreidp
- ibm-mas-entitymgr-addons
- ibm-mas-entitymgr-appcfg
- ibm-mas-entitymgr-bascfg
- ibm-mas-entitymgr-coreidp
- ibm-mas-entitymgr-idpcfg
- ibm-mas-entitymgr-jdbccfg
- ibm-mas-entitymgr-kafkacfg
- ibm-mas-entitymgr-mongocfg
- ibm-mas-entitymgr-objectstoragecfg
- ibm-mas-entitymgr-pushcfg
- ibm-mas-entitymgr-scimcfg
- ibm-mas-entitymgr-slscfg
- ibm-mas-entitymgr-smtpcfg
- ibm-mas-entitymgr-watsonstudiocfg
- ibm-mas-entitymgr-ws
- ibm-mas-internalapi
- ibm-mas-licensing-mediator
- ibm-mas-mobileapi
- ibm-mas-monagent-mas
- ibm-mas-nopriv
- ibm-mas-scim-agent
Cluster Permissions¤
| Group | Resource | Verbs |
|---|---|---|
| "" | configmaps | *, create, delete, get, list, patch, update, watch |
| "" | secrets | *, create, delete, get, list, patch, update, watch |
| "" | serviceaccounts | *, create, delete, get, list, patch, update, watch |
| "" | pods | *, create, delete, get, list, patch, update, watch |
| "" | pods/log | *, create, delete, get, list, patch, update, watch |
| "" | services | *, create, delete, get, list, patch, update, watch |
| "" | services/finalizers | *, create, delete, get, list, patch, update, watch |
| "" | endpoints | *, create, delete, get, list, patch, update, watch |
| "" | persistentvolumeclaims | *, create, delete, get, list, patch, update, watch |
| "" | events | *, create, delete, get, list, patch, update, watch |
| "" | namespaces | get |
| "" | deploymentconfigs | create, delete, deletecollection, get, list, patch, update, watch |
| "" | deploymentconfigs/scale | create, delete, deletecollection, get, list, patch, update, watch |
| "" | pods/exec | *, create, delete, get, list, patch, update, watch |
| "" | persistentvolumes | *, create, delete, get, list, patch, update, watch |
| "" | roles | create, delete, get, list, patch, update, watch |
| "" | rolebindings | create, delete, get, list, patch, update, watch |
| "" | services/proxy | create, delete, get, list, patch, update, watch |
| "" | certificates | get, list |
| rbac.authorization.k8s.io | rolebindings | *, create, delete, deletecollection, get, list, patch, update, watch |
| rbac.authorization.k8s.io | clusterrolebindings | create, delete, deletecollection, get, list, patch, update, watch |
| rbac.authorization.k8s.io | roles | *, create, delete, deletecollection, get, list, patch, update, watch |
| rbac.authorization.k8s.io | clusterroles | *, create, delete, deletecollection, get, list, patch, update, watch |
| rbac.authorization.k8s.io | serviceaccounts | create, delete, get, list, patch, update, watch |
| rbac.authorization.k8s.io | clusterroles/finalizers | * |
| apps | deployments | *, create, delete, get, list, patch, update, watch |
| apps | daemonsets | *, create, delete, get, list, patch, update, watch |
| apps | replicasets | *, create, delete, get, list, patch, update, watch |
| apps | statefulsets | *, create, delete, get, list, patch, update, watch |
| apps | deployments/finalizers | update |
| project.openshift.io | projects | *, create, get |
| operators.coreos.com | subscriptions | *, create, delete, get, list, patch, update |
| operators.coreos.com | installplans | create, delete, get, list, patch, update |
| operators.coreos.com | operatorgroups | *, create, delete, get, list, patch, update |
| operators.coreos.com | catalogsources | create, delete, get, list, patch, update |
| operators.coreos.com | clusterserviceversions | *, create, delete, get, list, patch, update |
| packages.operators.coreos.com | packagemanifests | get |
| apiextensions.k8s.io | customresourcedefinitions | *, create, delete, get, list, patch, update, watch |
| iot.ibm.com | iots | create, delete, get, list, patch, update, watch |
| iot.ibm.com | iotworkspaces | create, delete, get, list, patch, update, watch |
| iot.ibm.com | * | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | msoapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | msoworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | optimizerapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | optimizerworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | visualinspectionapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | visualinspectionappworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageaccelerators | get, list, patch, update |
| apps.mas.ibm.com | assistapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistbackups | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistbackups/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistbackups/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistrestores | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistrestores/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | assistrestores/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | facilitiesworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | hputilitiesworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managebuilds | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managebuilds/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managebuilds/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managedeployments | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managedeployments/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managedeployments/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageserverbundles | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageserverbundles/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageserverbundles/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | builddatainterpreters | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | builddatainterpreters/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | builddatainterpreters/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | monitorworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | msoapps/status | get, list, watch |
| apps.mas.ibm.com | msoapps/finalizers | get, list, watch |
| apps.mas.ibm.com | msoworkspaces/status | get, list, watch |
| apps.mas.ibm.com | msoworkspaces/finalizers | get, list, watch |
| apps.mas.ibm.com | optimizerapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | optimizerapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | optimizerworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | optimizerworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | predictworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | safetys | get, list, watch |
| apps.mas.ibm.com | safetys/status | get, list, watch |
| apps.mas.ibm.com | safetys/finalizers | get, list, watch |
| apps.mas.ibm.com | safetyworkspaces | get, list, watch |
| apps.mas.ibm.com | safetyworkspaces/status | get, list, watch |
| apps.mas.ibm.com | safetyworkspaces/finalizers | get, list, watch |
| apps.mas.ibm.com | visualinspectionapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | visualinspectionapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | visualinspectionappworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | visualinspectionappworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| monitoring.coreos.com | servicemonitors | create, delete, get, list, patch, update, watch |
| monitoring.coreos.com | prometheusrules | create, delete, get, list, patch, update |
| mas.ibm.com | * | create, delete, get, list, patch, update, watch |
| batch | jobs | * |
| batch | cronjobs | * |
| route.openshift.io | routes | create, delete, deletecollection, get, list, patch, update, watch |
| route.openshift.io | routes/custom-host | create, delete, deletecollection, get, list, patch, update, watch |
| extensions | statefulsets | create, delete, deletecollection, patch, update |
| extensions | statefulsets/scale | create, delete, deletecollection, patch, update |
| extensions | daemonsets | create, delete, deletecollection, patch, update |
| extensions | deployments | create, delete, deletecollection, get, list, patch, update, watch |
| extensions | deployments/rollback | create, delete, deletecollection, patch, update |
| extensions | deployments/scale | create, delete, deletecollection, patch, update |
| extensions | ingresses | create, delete, deletecollection, get, list, patch, update, watch |
| extensions | networkpolicies | create, delete, deletecollection, patch, update |
| extensions | replicasets | create, delete, deletecollection, patch, update |
| extensions | replicasets/scale | create, delete, deletecollection, patch, update |
| extensions | replicationcontrollers/scale | create, delete, deletecollection, patch, update |
| networking.k8s.io | ingresses | create, delete, deletecollection, get, list, patch, update, watch |
| networking.k8s.io | networkpolicies | *, create, delete, deletecollection, get, list, patch, update, watch |
| apps.openshift.io | deploymentconfigs | create, delete, deletecollection, get, list, patch, update, watch |
| apps.openshift.io | deploymentconfigs/scale | create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | certificates | *, create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | clusterissuers | create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | clusterissuer | create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | issuers | create, delete, get, list, patch, update, watch |
| integreatly.org | grafanadashboards | create, delete, get, list, patch, update, watch |
| monitoringcontroller.cloud.ibm.com | monitoringdashboards | create, delete, get, list, patch, update, watch |
| policy | poddisruptionbudgets | create, delete, deletecollection, get, list, patch, update, watch |
| authorization.openshift.io | clusterroles | create, delete, deletecollection, get, list, patch, update, watch |
| authorization.openshift.io | clusterrolebindings | create, delete, deletecollection, get, list, patch, update, watch |
| authorization.openshift.io | rolebindings | create, delete, deletecollection, get, list, patch, update, watch |
| authorization.openshift.io | roles | create, delete, deletecollection, get, list, patch, update, watch |
| iot.apps.mas.ibm.com | * | create, delete, get, list, patch, update, watch |
| image.openshift.io | builds | create, delete, get, list, patch, update, watch |
| image.openshift.io | buildconfigs | create, delete, get, list, patch, update, watch |
| image.openshift.io | buildconfigs/instantiatebinary | create, delete, get, list, patch, update, watch |
| image.openshift.io | imagestreams | create, delete, get, list, patch, update, watch |
| image.openshift.io | imagestreamtags | create, delete, get, list, patch, update, watch |
| build.openshift.io | builds | create, delete, get, list, patch, update, watch |
| build.openshift.io | buildconfigs | create, delete, get, list, patch, update, watch |
| build.openshift.io | buildconfigs/instantiatebinary | create, delete, get, list, patch, update, watch |
| build.openshift.io | imagestreams | create, delete, get, list, patch, update, watch |
| build.openshift.io | imagestreamtags | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores | *, create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores/status | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores/finalizers | create, delete, get, list, patch, update, watch |
| admissionregistration.k8s.io | validatingwebhookconfigurations | create, delete, get, list, patch, update |
| autoscaling | horizontalpodautoscalers | create, delete, deletecollection, get, list, patch, update |
| security.openshift.io | securitycontextconstraints | get, list, watch |
| asset-data-dictionary.ibm.com | assetdatadictionaries | * |
| asset-data-dictionary.ibm.com | assetdatadictionaries/status | * |
| asset-data-dictionary.ibm.com | assetdatadictionaries/finalizers | * |
| asset-data-dictionary.ibm.com | datadictionaryworkspaces | * |
| asset-data-dictionary.ibm.com | datadictionaryworkspaces/status | * |
| asset-data-dictionary.ibm.com | datadictionaryworkspaces/finalizers | * |
Namespace Permissions¤
| Group | Resource | Verbs |
|---|---|---|
| "" | events | create, delete, get, list, patch, update, watch |
| "" | secrets | create, delete, get, list, patch, update, watch |
| "" | pods | create, delete, get, list, patch, update, watch |
| "" | pods/exec | create, delete, get, list, patch, update, watch |
| "" | pods/log | create, delete, get, list, patch, update, watch |
| "" | configmaps | create, delete, get, list, patch, update, watch |
| "" | services | create, delete, get, list, patch, update, watch |
| apps | deployments | create, delete, get, list, patch, update, watch |
| apps | daemonsets | create, delete, get, list, patch, update, watch |
| apps | replicasets | create, delete, get, list, patch, update, watch |
| apps | statefulsets | create, delete, get, list, patch, update, watch |
| batch | cronjobs | create, delete, get, list, patch, update, watch |
| batch | jobs | create, delete, get, list, patch, update, watch |
| route.openshift.io | routes | create, delete, deletecollection, get, list, patch, update, watch |
| route.openshift.io | routes/custom-host | create |
| route.openshift.io | routes/status | get, list, update, watch |
| networking.k8s.io | networkpolicies | create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | certificates | create, delete, get, list, patch, update, watch |
| cert-manager.io | clusterissuers | create, delete, get, list, patch, update, watch |
| cert-manager.io | issuers | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores/status | get |
| operator.ibm.com | operandrequests | create, delete, get, list, patch, update, watch |
| core.mas.ibm.com | suites | create, delete, get, list, patch, update, watch |
| core.mas.ibm.com | suites/status | create, delete, get, list, patch, update, watch |
| core.mas.ibm.com | workspaces | delete, get, list, watch |
| config.mas.ibm.com | * | create, delete, get, list, patch, update, watch |
| internal.mas.ibm.com | * | create, delete, get, list, patch, update, watch |
| addons.mas.ibm.com | * | delete, get, list, watch |