Maximo Application Suite CLI Ansible CLI
Edit on GitHub
Image Mirroring Image Validation Install Update Upgrade Uninstall MRE&F External DB Setup EAM Migration Mirror Db2 Images Minimal RBAC update upgrade uninstall must-gather configure-airgap mirror-redhat-images setup-registry teardown-registry provision-fyre provision-roks provision-rosa configtool-oidc Overview Jul 31 2025 Jun 24 2025 May 01 2025 Apr 03 2025 Dependencies Topology Cluster Extensions

IBM Storage Fusion v2.10.1¤

Install Modes¤

Mode Supported
OwnNamespace True
SingleNamespace True
MultiNamespace False
AllNamespaces False

Service Accounts¤

No service accounts

Cluster Permissions¤

Group Resource Verbs
"" configmaps create, delete, get, list, patch, update, watch
"" namespaces create, delete, get, list, patch, update, watch
"" serviceaccounts create, delete, get, list, patch, update, watch
"" services create, delete, get, list, patch, update, watch
"" secrets create, delete, get, list, patch, update, watch
"" nodes create, delete, get, list, patch, update, watch
"" pods create, delete, get, list, patch, update, watch
"" pods/exec create, get
"" leases create, delete, get, list, patch, update, watch
"" persistentvolumes create, delete, get, list, patch, update, watch
"" events create, delete, get, list, patch, update, watch
"" persistentvolumes/finalizers update
"" persistentvolumes/status get, patch, update
"" endpoints get, list, watch
"" persistentvolumeclaims create, delete, get, list, patch, update, watch
"" namespaces/finalizers update
"" namespaces/status get, patch, update
"" serviceaccounts/token create, get, list
"" nodes/finalizers update
"" nodes/status get, patch, update
"" persistentvolumeclaims/finalizers update
"" persistentvolumeclaims/status get, patch, update
"" pods/finalizers update
"" pods/status get, patch, update
"" secrets/finalizers update
"" secrets/status get, patch, update
"" pvc create, delete, get, list, patch, update, watch
"" pods/log get, list
application.isf.ibm.com applications create, delete, get, list, patch, update, watch
application.isf.ibm.com clusters create, delete, get, list, patch, update, watch
application.isf.ibm.com clusters/finalizers patch, update
application.isf.ibm.com clusters/status get, patch, update
application.isf.ibm.com connections create, delete, get, list, patch, update, watch
application.isf.ibm.com applications/finalizers update
application.isf.ibm.com connections/finalizers update
application.isf.ibm.com applications/status get, patch, update
application.isf.ibm.com connections/status get, patch, update
config.openshift.io clusterversions get, list, patch, update, watch
config.openshift.io * create, delete, get, list, patch, update, watch
config.openshift.io infrastructures get, list, watch
config.openshift.io clusteroperators get, list, watch
config.openshift.io clusteroperators/finalizers update
config.openshift.io clusteroperators/status get, list, watch
config.openshift.io clusterversions/status get, patch, update
config.openshift.io proxies get, list, watch
config.openshift.io proxies/finalizers update
config.openshift.io proxies/status get, list, watch
config.openshift.io ingresses get
data-protection.isf.ibm.com backuppolicies create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com backups create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com backuppolicies/status get, patch, update
data-protection.isf.ibm.com backups/status get, patch, update
data-protection.isf.ibm.com backupstoragelocations/status get, patch, update
data-protection.isf.ibm.com deletebackuprequests/status get, patch, update
data-protection.isf.ibm.com policyassignments/status get, patch, update
data-protection.isf.ibm.com recoverbackupcrs/status get, patch, update
data-protection.isf.ibm.com restores/status get, patch, update
data-protection.isf.ibm.com backupstoragelocations create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com deletebackuprequests create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com policyassignments create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com recoverbackupcrs create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com restores create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com deletebackuprequests/finalizers update
data-protection.isf.ibm.com policyassignments/finalizers update
data-protection.isf.ibm.com recoverbackupcrs/finalizers update
data-protection.isf.ibm.com restores/finalizers update
data-protection.isf.ibm.com backuppolicies/finalizers update
data-protection.isf.ibm.com backups/finalizers update
data-protection.isf.ibm.com backupstoragelocations/finalizers update
rbac.authorization.k8s.io clusterrolebindings *, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io clusterroles *, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io rolebindings create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io roles create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io * *
service.isf.ibm.com fusionserviceinstances create, delete, get, list, patch, update, watch
service.isf.ibm.com fusionserviceinstances/finalizers update
service.isf.ibm.com fusionserviceinstances/status get, patch, update
service.isf.ibm.com * create, get, list, patch, update, watch
service.isf.ibm.com fusionservicedefinitions create, delete, get, list, patch, update, watch
service.isf.ibm.com fusionservicedefinitions/finalizers update
service.isf.ibm.com fusionservicedefinitions/status get, patch, update
spp-data-protection.isf.ibm.com recipes get, list, watch
user.openshift.io groups get, list, watch
user.openshift.io users get, list, watch
authentication.k8s.io tokenreviews create
authentication.k8s.io * create, delete, get, list, patch, update, watch
authorization.k8s.io subjectaccessreviews create
authorization.k8s.io * create, delete, get, list, patch, update, watch
admissionregistration.k8s.io * *, create, delete, get, list, patch, update, watch
csi.ibm.com * *
security.openshift.io * *
security.openshift.io securitycontextconstraints use
apiextensions.k8s.io customresourcedefinitions create, delete, get, list, patch, update, watch
apiextensions.k8s.io customresourcedefinitions/status get, patch, update
apps * create, delete, get, list, patch, update, watch
apps deployments create, delete, get, list, patch, update, watch
apps statefulsets create, delete, get, list, update, watch
apps daemonsets get, list, watch
apps replicasets get, list, watch
coordination * create, delete, get, list, patch, update, watch
discovery.k8s.io * create, delete, get, list, patch, update, watch
local.storage.openshift.io * create, delete, get, list, patch, update, watch
local.storage.openshift.io localvolumediscoveryresults create, delete, get, list, update, watch
local.storage.openshift.io localvolumes create, delete, get, list, update, watch
local.storage.openshift.io localvolumesets create, delete, get, list, update, watch
local.storage.openshift.io localvolumes/status get, update
local.storage.openshift.io localvolumesets/status get, update
local.storage.openshift.io localvolumediscoveries get, list
monitoring.coreos.com * create, delete, get, list, patch, update, watch
monitoring.coreos.com prometheusrules create, delete, get, list, patch, update, watch
monitoring.coreos.com servicemonitors create, delete, get, list, update, watch
monitoring.coreos.com prometheuses/api get
monitoring.coreos.com alertmanagers create, get, list, update
monitoring.coreos.com alertmanagers/api create, get, list, update
oauth.openshift.io * create, delete, get, list, patch, update, watch
oauth.openshift.io oauthclients create, delete, get, list, patch, update, watch
operator.openshift.io * create, delete, get, list, patch, update, watch
operator.openshift.io consoles get, list, patch, update, watch
operator.openshift.io networks get, list, patch, update, watch
packages.operators.coreos.com * create, delete, get, list, patch, update, watch
policy * create, delete, get, list, patch, update, watch
policy poddisruptionbudgets create, delete, get, list, patch, update, watch
policy poddisruptionbudgets/finalizers update
policy poddisruptionbudgets/status get, patch, update
route.openshift.io * create, delete, get, list, patch, update, watch
route.openshift.io routes create, delete, get, list, patch, update, watch
ceph.rook.io cephclusters list, watch
ceph.rook.io cephclusters/status get
cns.isf.ibm.com encryptionclients create, delete, get, list, patch, update, watch
cns.isf.ibm.com encryptionservers create, delete, get, list, patch, update, watch
cns.isf.ibm.com scaleclusters create, delete, get, list, patch, update, watch
cns.isf.ibm.com scalemanagers create, delete, get, list, patch, update, watch
cns.isf.ibm.com encryptionclients/finalizers update
cns.isf.ibm.com encryptionservers/finalizers update
cns.isf.ibm.com scaleclusters/finalizers update
cns.isf.ibm.com scalemanagers/finalizers update
cns.isf.ibm.com encryptionclients/status get, patch, update
cns.isf.ibm.com encryptionservers/status get, patch, update
cns.isf.ibm.com scaleclusters/status get, patch, update
cns.isf.ibm.com scalemanagers/status get, patch, update
cns.isf.ibm.com * create, get, list, patch, update, watch
cns.isf.ibm.com sncfilesystems create, delete, get, list, patch, update, watch
coordination.k8s.io configmaps create, delete, get, list, patch, update, watch
coordination.k8s.io leases create, delete, get, list, patch, update, watch
coordination.k8s.io secrets create, delete, get, list, patch, update, watch
lvm.topolvm.io lvmclusters create, delete, get, list, patch, update, watch
lvm.topolvm.io lvmclusters/status create, delete, get, list, patch, update, watch
lvm.topolvm.io lvmclusters/finalizers update
machineconfiguration.openshift.io containerruntimeconfigs create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io kubeletconfigs create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io machineconfigpools create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io machineconfigs create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io machineconfigpools/finalizers update
machineconfiguration.openshift.io machineconfigpools/status get, list, watch
metrodr.isf.ibm.com metrodrs create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com metrodrinits create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com metrodrinits/finalizers update
metrodr.isf.ibm.com metrodrinits/status get
metrodr.isf.ibm.com * create, delete, get, list, patch, update, watch
ocs.openshift.io ocsinitializations create, delete, get, list, update, watch
ocs.openshift.io storageclaims create, delete, get, list, update, watch
ocs.openshift.io storageclassclaims create, delete, get, list, update, watch
ocs.openshift.io storageclients create, delete, get, list, update, watch
ocs.openshift.io storageclusters create, delete, get, list, patch, update, watch
ocs.openshift.io storageprofiles create, delete, get, list, update, watch
ocs.openshift.io storageclaims/status get, update
ocs.openshift.io storageclassclaims/status get, update
ocs.openshift.io storageclients/status get, update
ocs.openshift.io storageclusters/status get, patch, update
ocs.openshift.io storageprofiles/status get, update
ocs.openshift.io storageclusters/finalizers update
odf.isf.ibm.com odfclusters create, delete, get, list, patch, update, watch
odf.isf.ibm.com odfmanagers create, delete, get, list, patch, update, watch
odf.isf.ibm.com odfmanagers/finalizers create, delete, get, list, patch, update, watch
odf.isf.ibm.com odfmanagers/status create, delete, get, list, patch, update, watch
odf.isf.ibm.com odfclusters/finalizers update
odf.isf.ibm.com odfclusters/status get, patch, update
odf.isf.ibm.com odfmanager get, list, watch
odf.isf.ibm.com odfmanager/finalizers update
odf.isf.ibm.com odfmanager/status get, list, watch
operators.coreos.com * create, delete, get, list, patch, update, watch
operators.coreos.com subscriptions create, delete, get, list, patch, update, watch
operators.coreos.com subscriptions/finalizers update
operators.coreos.com subscriptions/status get, patch, update
operators.coreos.com clusterserviceversions get, list
scale.spectrum.ibm.com * create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com callhomes create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com clusters create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com encryptionconfigs create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com filesystems create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com remoteclusters create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com daemons get, list, watch
snapshot.storage.k8s.io volumesnapshotclasses create, delete, get, list, patch, update, watch
storage.isf.ibm.com scales create, delete, get, list, patch, update, watch
storage.isf.ibm.com scales/status get, list, watch
storage.isf.ibm.com * create, get, list, patch, update, watch
storage.isf.ibm.com nodes create, get, list, patch, update, watch
storage.isf.ibm.com nodes/finalizers update
storage.isf.ibm.com nodes/status get, list, patch, update, watch
storage.k8s.io * create, delete, get, list, patch, update, watch
storage.k8s.io storageclasses create, delete, get, list, patch, update, watch
certificates.k8s.io certificatesigningrequests create, get, list, patch, update, watch
certificates.k8s.io certificatesigningrequests/approval get, list, update, watch
certificates.k8s.io signers approve, get, list, watch
certificates.k8s.io certificatesigningrequests/status create, get, list, update, watch
operator.ibm.com commonservices get, list, watch
operator.ibm.com namespacescopes get, list, watch
operator.ibm.com operandrequests get, list
ramendr.openshift.io volumereplicationgroups get, list, watch
rdr.isf.ibm.com regionaldrs create, get, list, update, watch
zen.cpd.ibm.com zenservices get, list
batch jobs get, list, watch
batch jobs/status get, list, watch
batch cronjobs create, delete, get, list, update, watch
dataprotectionagent.idp.ibm.com dataprotectionagents get, list, watch
dataprotectionserver.idp.ibm.com dataprotectionservers get, list, watch
firmware.isf.ibm.com computefirmwares get, list, patch, update, watch
firmware.isf.ibm.com computefirmwares/status get, patch, update
initialization.isf.ibm.com computeinits get, list, patch, update, watch
initialization.isf.ibm.com computeinits/status get, patch, update
kubevirt.io virtualmachines get, list, watch
kubevirt.io virtualmachines/finalizers update
kubevirt.io virtualmachines/status get, list, watch
monitoring.isf.ibm.com computemonitorings create, delete, get, list, patch, update, watch
monitoring.isf.ibm.com computemonitorings/status get, patch, update
network.isf.ibm.com switches create, delete, get, list, patch, update, watch
network.isf.ibm.com switches/status get, patch, update
network.isf.ibm.com switchupgrades get, list, patch, update, watch
network.isf.ibm.com switchupgrades/status get, patch, update
network.isf.ibm.com links create, delete, get, list, patch, update, watch
network.isf.ibm.com switchlinks get, list
network.isf.ibm.com switchvlans get, list
network.isf.ibm.com vlans create, delete, get, list, patch, update, watch
systemhealth.isf.ibm.com healthmanagers create, delete, get, list, patch, update, watch
systemhealth.isf.ibm.com healthmanagers/finalizers update
systemhealth.isf.ibm.com healthmanagers/status get, patch, update
update.isf.ibm.com updatemanagers create, delete, get, list, patch, update, watch
update.isf.ibm.com updatemanagers/finalizers update
update.isf.ibm.com updatemanagers/status get, patch, update
authorization.openshift.io clusterrolebindings list
authorization.openshift.io rolebindings list
cluster.open-cluster-management.io managedclusters list
configuration.isf.ibm.com computeconfigurations create, delete, get, list, patch, update, watch
console.openshift.io consoleplugins create, delete, get, list, update, watch
console.openshift.io * create, delete, get, list, patch, update, watch
dataprotection.isf.ibm.com metrodrdataprotections create, delete, get, list, patch, update, watch
init.isf.ibm.com networkinits create, get, list, update
install.isf.ibm.com computeprovisionworkers create, delete, get, list, patch, update, watch
install.isf.ibm.com storagesetups create, delete, get, list, patch, update, watch
install.isf.ibm.com computeprovisionworkers/finalizers update
install.isf.ibm.com computeprovisionworkers/status get, patch, update
maintenance.isf.ibm.com computemaintenances create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfconsoleplugins create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfconsoleplugins/finalizers update
mgmtsft.isf.ibm.com isfconsoleplugins/status get, patch, update
mgmtsft.isf.ibm.com isfproxydeps create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfproxydeps/finalizers update
mgmtsft.isf.ibm.com isfproxydeps/status get, patch, update
mgmtsft.isf.ibm.com isfuideps create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfuideps/finalizers update
mgmtsft.isf.ibm.com isfuideps/status get, patch, update
mgmtsft.isf.ibm.com isfchdeps create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfchdeps/finalizers update
mgmtsft.isf.ibm.com isfchdeps/status get, patch, update
mgmtsft.isf.ibm.com isfemdeps create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isfemdeps/finalizers update
mgmtsft.isf.ibm.com isfemdeps/status get, patch, update
mgmtsft.isf.ibm.com isflcdeps create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com isflcdeps/finalizers update
mgmtsft.isf.ibm.com isflcdeps/status get, patch, update
monitor.isf.ibm.com systemhealths create, delete, get, list, patch, update, watch
monitor.isf.ibm.com nodeconfigs create, delete, get, list, patch, update, watch
monitor.isf.ibm.com nodeconfigs/finalizers update
monitor.isf.ibm.com nodeconfigs/status get, patch, update
networking.k8s.io networkpolicies create, delete, get, list, patch, update, watch
powerop.isf.ibm.com computepowerops create, delete, get, list, patch, update, watch
prereq.isf.ibm.com spectrumfusions create, delete, get, list, patch, update, watch
prereq.isf.ibm.com spectrumfusions/finalizers update
prereq.isf.ibm.com spectrumfusions/status get, patch, update
project.openshift.io projects create, delete, get, list, patch, update, watch
rackimport.isf.ibm.com rackinfoes get, list, patch, update
cas.isf.ibm.com datasources create, delete, get, list, patch, update, watch
cas.isf.ibm.com datasources/finalizers update
cas.isf.ibm.com datasources/status get, patch, update
cas.isf.ibm.com documentprocessors create, delete, get, list, patch, update, watch
cas.isf.ibm.com documentprocessors/finalizers update
cas.isf.ibm.com documentprocessors/status get, patch, update
cas.isf.ibm.com domains create, delete, get, list, patch, update, watch
cas.isf.ibm.com domains/finalizers update
cas.isf.ibm.com domains/status get, patch, update
cas.isf.ibm.com casresourceaccesscontrols create, delete, get, list, patch, update, watch
cas.isf.ibm.com casresourceaccesscontrols/status get
cas.isf.ibm.com identityproviders create, delete, get, list, patch, update, watch
cas.isf.ibm.com identityproviders/status get
* * *, get, list
events.k8s.io events get, list, watch
k8s.cni.cncf.io network-attachment-definitions get, list
metrics.k8s.io nodes get, list, watch
konveyor.openshift.io * create, delete, get, list, patch, update, watch
machine.openshift.io machinesets create, get, list, update, watch
metal3.io baremetalhosts create, get, list, update, watch

Namespace Permissions¤

Group Resource Verbs
"" configmaps create, delete, get, list, patch, update, watch
"" events create, patch
"" leases create, delete, get, list, patch, update, watch
"" pods list
"" pods/log get, list, watch
"" serviceaccounts create, get
"" secrets create, delete, get, update
"" serviceaccounts/token create, get, list
coordination.k8s.io leases create, delete, get, list, patch, update, watch
coordination.k8s.io configmaps create, delete, get, list, patch, update, watch
monitoring.coreos.com servicemonitors create, get