IBM Storage Fusion v2.12.0¶

Install Modes¶

Mode	Supported
OwnNamespace	True
SingleNamespace	True
MultiNamespace	False
AllNamespaces	False

Service Accounts¶

No service accounts

Cluster Permissions¶

Group	Resource	Verbs
""	persistentvolumeclaims	create, delete, get, list, patch, update, watch
""	services	create, delete, get, list, patch, update, watch
""	persistentvolumes	create, delete, get, list, patch, update, watch
""	configmaps	create, delete, get, list, patch, update, watch
""	events	create, delete, get, list, patch, update, watch
""	namespaces	create, delete, get, list, patch, update, watch
""	nodes	create, delete, get, list, patch, update, watch
""	pods	create, delete, get, list, patch, update, watch
""	pvc	create, delete, get, list, patch, update, watch
""	secrets	create, delete, get, list, patch, update, watch
""	serviceaccounts	create, delete, get, list, patch, update, watch
""	pods/exec	create, get
""	leases	create, delete, get, list, patch, update, watch
""	persistentvolumes/finalizers	update
""	persistentvolumes/status	get, patch, update
""	endpoints	get, list, watch
""	namespaces/finalizers	update
""	namespaces/status	get, patch, update
""	serviceaccounts/token	create, get, list
""	nodes/finalizers	update
""	nodes/status	get, patch, update
""	persistentvolumeclaims/finalizers	update
""	persistentvolumeclaims/status	get, patch, update
""	pods/finalizers	update
""	pods/status	get, patch, update
""	secrets/finalizers	update
""	secrets/status	get, patch, update
""	pods/log	get, list
application.isf.ibm.com	applications	create, delete, get, list, patch, update, watch
application.isf.ibm.com	applications/finalizers	update
application.isf.ibm.com	applications/status	get, patch, update
application.isf.ibm.com	clusters	create, delete, get, list, patch, update, watch
application.isf.ibm.com	clusters/finalizers	patch, update
application.isf.ibm.com	clusters/status	get, patch, update
application.isf.ibm.com	connections	create, delete, get, list, patch, update, watch
application.isf.ibm.com	connections/finalizers	update
application.isf.ibm.com	connections/status	get, patch, update
apps	deployments	create, delete, get, list, patch, update, watch
apps	*	create, delete, get, list, patch, update, watch
apps	statefulsets	create, delete, get, list, update, watch
apps	daemonsets	get, list, watch
apps	replicasets	get, list, watch
authorization.openshift.io	clusterrolebindings	get, list, watch
authorization.openshift.io	rolebindings	list
ceph.rook.io	cephclusters	list, watch
ceph.rook.io	cephclusters/status	get
certificates.k8s.io	certificatesigningrequests	create, get, list, patch, update, watch
certificates.k8s.io	certificatesigningrequests/approval	get, list, update, watch
certificates.k8s.io	signers	approve, get, list, watch
certificates.k8s.io	certificatesigningrequests/status	create, get, list, update, watch
cluster.open-cluster-management.io	managedclusters	list
cns.isf.ibm.com	encryptionclients	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	encryptionservers	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	scaleclusters	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	scaleclusters/finalizers	update
cns.isf.ibm.com	scaleclusters/status	get, patch, update
cns.isf.ibm.com	sncfilesystems	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	scalemanagers	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	encryptionclients/finalizers	update
cns.isf.ibm.com	encryptionservers/finalizers	update
cns.isf.ibm.com	scalemanagers/finalizers	update
cns.isf.ibm.com	encryptionclients/status	get, patch, update
cns.isf.ibm.com	encryptionservers/status	get, patch, update
cns.isf.ibm.com	scalemanagers/status	get, patch, update
cns.isf.ibm.com	*	create, get, list, patch, update, watch
config.openshift.io	clusterversions	get, list, patch, update, watch
config.openshift.io	infrastructures	get, list, watch
config.openshift.io	ingresses	get
config.openshift.io	*	create, delete, get, list, patch, update, watch
config.openshift.io	clusteroperators	get, list, watch
config.openshift.io	clusteroperators/finalizers	update
config.openshift.io	clusteroperators/status	get, list, watch
config.openshift.io	clusterversions/status	get, patch, update
config.openshift.io	proxies	get, list, watch
config.openshift.io	proxies/finalizers	update
config.openshift.io	proxies/status	get, list, watch
configuration.isf.ibm.com	computeconfigurations	create, delete, get, list, patch, update, watch
console.openshift.io	consoleplugins	create, delete, get, list, update, watch
console.openshift.io	*	create, delete, get, list, patch, update, watch
coordination.k8s.io	leases	create, delete, get, list, patch, update, watch
coordination.k8s.io	configmaps	create, delete, get, list, patch, update, watch
coordination.k8s.io	secrets	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backuppolicies	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backuppolicies/finalizers	update
data-protection.isf.ibm.com	backuppolicies/status	get, patch, update
data-protection.isf.ibm.com	backups	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backups/finalizers	update
data-protection.isf.ibm.com	backups/status	get, patch, update
data-protection.isf.ibm.com	backupstoragelocations	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backupstoragelocations/finalizers	update
data-protection.isf.ibm.com	backupstoragelocations/status	get, patch, update
data-protection.isf.ibm.com	deletebackuprequests	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	policyassignments	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	policyassignments/finalizers	update
data-protection.isf.ibm.com	policyassignments/status	get, patch, update
data-protection.isf.ibm.com	restores	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	restores/finalizers	update
data-protection.isf.ibm.com	restores/status	get, patch, update
data-protection.isf.ibm.com	deletebackuprequests/status	get, patch, update
data-protection.isf.ibm.com	recoverbackupcrs/status	get, patch, update
data-protection.isf.ibm.com	transforms/status	get, patch, update
data-protection.isf.ibm.com	recoverbackupcrs	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	transforms	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	deletebackuprequests/finalizers	update
data-protection.isf.ibm.com	recoverbackupcrs/finalizers	update
data-protection.isf.ibm.com	transforms/finalizers	update
dataprotection.isf.ibm.com	metrodrdataprotections	create, delete, get, list, patch, update, watch
dataprotectionserver.idp.ibm.com	dataprotectionservers	get, list, watch
firmware.isf.ibm.com	computefirmwares	get, list, patch, update, watch
firmware.isf.ibm.com	computefirmwares/status	get, patch, update
init.isf.ibm.com	networkinits	create, get, list, update
initialization.isf.ibm.com	computeinits	get, list, patch, update, watch
initialization.isf.ibm.com	computeinits/status	get, patch, update
install.isf.ibm.com	computeprovisionworkers	create, delete, get, list, patch, update, watch
install.isf.ibm.com	storagesetups	create, delete, get, list, patch, update, watch
install.isf.ibm.com	computeprovisionworkers/finalizers	update
install.isf.ibm.com	computeprovisionworkers/status	get, patch, update
local.storage.openshift.io	localvolumediscoveries	get, list
local.storage.openshift.io	localvolumediscoveryresults	create, delete, get, list, update, watch
local.storage.openshift.io	*	create, delete, get, list, patch, update, watch
local.storage.openshift.io	localvolumes	create, delete, get, list, update, watch
local.storage.openshift.io	localvolumesets	create, delete, get, list, update, watch
local.storage.openshift.io	localvolumes/status	get, update
local.storage.openshift.io	localvolumesets/status	get, update
maintenance.isf.ibm.com	computemaintenances	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	metrodrinits	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	metrodrinits/finalizers	update
metrodr.isf.ibm.com	metrodrinits/status	get
metrodr.isf.ibm.com	metrodrs	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	*	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfconsoleplugins	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfconsoleplugins/finalizers	update
mgmtsft.isf.ibm.com	isfconsoleplugins/status	get, patch, update
mgmtsft.isf.ibm.com	isfproxydeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfproxydeps/finalizers	update
mgmtsft.isf.ibm.com	isfproxydeps/status	get, patch, update
mgmtsft.isf.ibm.com	isfuideps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfuideps/finalizers	update
mgmtsft.isf.ibm.com	isfuideps/status	get, patch, update
mgmtsft.isf.ibm.com	isfchdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfchdeps/finalizers	update
mgmtsft.isf.ibm.com	isfchdeps/status	get, patch, update
mgmtsft.isf.ibm.com	isfemdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfemdeps/finalizers	update
mgmtsft.isf.ibm.com	isfemdeps/status	get, patch, update
mgmtsft.isf.ibm.com	isflcdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isflcdeps/finalizers	update
mgmtsft.isf.ibm.com	isflcdeps/status	get, patch, update
monitor.isf.ibm.com	systemhealths	create, delete, get, list, patch, update, watch
monitor.isf.ibm.com	nodeconfigs	create, delete, get, list, patch, update, watch
monitor.isf.ibm.com	nodeconfigs/finalizers	update
monitor.isf.ibm.com	nodeconfigs/status	get, patch, update
monitoring.coreos.com	prometheuses/api	create, get
monitoring.coreos.com	servicemonitors	create, delete, get, list, update, watch
monitoring.coreos.com	*	create, delete, get, list, patch, update, watch
monitoring.coreos.com	prometheusrules	create, delete, get, list, patch, update, watch
monitoring.coreos.com	alertmanagers	create, get, list, update
monitoring.coreos.com	alertmanagers/api	create, get, list, update
monitoring.coreos.com	podmonitors	get, list, watch
monitoring.coreos.com	probes	get, list, watch
monitoring.coreos.com	prometheuses	get, list, watch
monitoring.isf.ibm.com	computemonitorings	create, delete, get, list, patch, update, watch
monitoring.isf.ibm.com	computemonitorings/status	get, patch, update
network.isf.ibm.com	links	create, delete, get, list, patch, update, watch
network.isf.ibm.com	switches	create, delete, get, list, patch, update, watch
network.isf.ibm.com	switchlinks	get, list
network.isf.ibm.com	switchvlans	get, list
network.isf.ibm.com	switchupgrades	get, list, patch, update, watch
network.isf.ibm.com	vlans	create, delete, get, list, patch, update, watch
network.isf.ibm.com	switches/status	get, patch, update
network.isf.ibm.com	switchupgrades/status	get, patch, update
networking.k8s.io	networkpolicies	create, delete, get, list, patch, update, watch
oauth.openshift.io	oauthclients	create, delete, get, list, patch, update, watch
oauth.openshift.io	*	create, delete, get, list, patch, update, watch
ocs.openshift.io	storageclusters	create, delete, get, list, patch, update, watch
ocs.openshift.io	storageclusters/status	get, patch, update
ocs.openshift.io	storageclients	create, delete, get, list, update, watch
ocs.openshift.io	storageclusters/finalizers	update
ocs.openshift.io	ocsinitializations	create, delete, get, list, update, watch
ocs.openshift.io	storageclaims	create, delete, get, list, update, watch
ocs.openshift.io	storageclassclaims	create, delete, get, list, update, watch
ocs.openshift.io	storageprofiles	create, delete, get, list, update, watch
ocs.openshift.io	storageclaims/status	get, update
ocs.openshift.io	storageclassclaims/status	get, update
ocs.openshift.io	storageclients/status	get, update
ocs.openshift.io	storageprofiles/status	get, update
odf.isf.ibm.com	odfclusters	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfclusters/status	get, patch, update
odf.isf.ibm.com	odfmanagers	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfmanagers/status	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfmanagers/finalizers	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfclusters/finalizers	update
odf.isf.ibm.com	odfmanager	get, list, watch
odf.isf.ibm.com	odfmanager/finalizers	update
odf.isf.ibm.com	odfmanager/status	get, list, watch
operator.openshift.io	consoles	get, list, patch, update, watch
operator.openshift.io	networks	get, list, patch, update, watch
operator.openshift.io	*	create, delete, get, list, patch, update, watch
operators.coreos.com	clusterserviceversions	get, list
operators.coreos.com	*	create, delete, get, list, patch, update, watch
operators.coreos.com	subscriptions	create, delete, get, list, patch, update, watch
operators.coreos.com	subscriptions/finalizers	update
operators.coreos.com	subscriptions/status	get, patch, update
powerop.isf.ibm.com	computepowerops	create, delete, get, list, patch, update, watch
prereq.isf.ibm.com	spectrumfusions	create, delete, get, list, patch, update, watch
prereq.isf.ibm.com	spectrumfusions/finalizers	update
prereq.isf.ibm.com	spectrumfusions/status	get, patch, update
project.openshift.io	projects	create, delete, get, list, patch, update, watch
rackimport.isf.ibm.com	rackinfoes	get, list, patch, update
rbac.authorization.k8s.io	clusterrolebindings	*, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	rolebindings	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	*	*
rbac.authorization.k8s.io	clusterroles	*, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	roles	create, delete, get, list, patch, update, watch
rdr.isf.ibm.com	regionaldrs	create, get, list, update, watch
route.openshift.io	routes	create, delete, get, list, patch, update, watch
route.openshift.io	*	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	callhomes	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	clusters	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	encryptionconfigs	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	filesystems	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	remoteclusters	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	*	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	daemons	get, list, watch
service.isf.ibm.com	fusionservicedefinitions	create, delete, get, list, patch, update, watch
service.isf.ibm.com	fusionserviceinstances	create, delete, get, list, patch, update, watch
service.isf.ibm.com	fusionservicedefinitions/finalizers	update
service.isf.ibm.com	fusionservicedefinitions/status	get, patch, update
service.isf.ibm.com	fusionserviceinstances/finalizers	update
service.isf.ibm.com	fusionserviceinstances/status	get, patch, update
service.isf.ibm.com	*	create, get, list, patch, update, watch
storage.isf.ibm.com	scales	create, delete, get, list, patch, update, watch
storage.isf.ibm.com	nodes	create, delete, get, list, patch, update, watch
storage.isf.ibm.com	scales/status	get, list, watch
storage.isf.ibm.com	*	create, get, list, patch, update, watch
storage.isf.ibm.com	nodes/finalizers	update
storage.isf.ibm.com	nodes/status	get, list, patch, update, watch
storage.k8s.io	storageclasses	create, delete, get, list, patch, update, watch
storage.k8s.io	*	create, delete, get, list, patch, update, watch
systemhealth.isf.ibm.com	healthmanagers	create, delete, get, list, patch, update, watch
systemhealth.isf.ibm.com	healthmanagers/finalizers	update
systemhealth.isf.ibm.com	healthmanagers/status	get, patch, update
update.isf.ibm.com	updatemanagers	create, delete, get, list, patch, update, watch
update.isf.ibm.com	updatemanagers/finalizers	update
update.isf.ibm.com	updatemanagers/status	get, patch, update
cas.isf.ibm.com	datasources	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	datasources/finalizers	update
cas.isf.ibm.com	datasources/status	get, patch, update
cas.isf.ibm.com	documentprocessors	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	documentprocessors/finalizers	update
cas.isf.ibm.com	documentprocessors/status	get, patch, update
cas.isf.ibm.com	domains	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	domains/finalizers	update
cas.isf.ibm.com	domains/status	get, patch, update
cas.isf.ibm.com	casresourceaccesscontrols	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	casresourceaccesscontrols/status	get
cas.isf.ibm.com	identityproviders	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	identityproviders/status	get
cas.isf.ibm.com	casinstalls	get, list, update, watch
cas.isf.ibm.com	*	create, delete, get, list, patch, update, watch
cas.isf.ibm.com	*/finalizers	get, list, update
cas.isf.ibm.com	*/status	get, patch, update
hypershift.openshift.io	nodepools	list
hypershift.openshift.io	hostedcontrolplanes	list
hypershift.openshift.io	hostedclusters	get, list, update
agent-install.openshift.io	agents	list
capi-provider.agent-install.openshift.io	agentmachines	get
discovery.k8s.io	endpointslices	get, list, watch
discovery.k8s.io	*	create, delete, get, list, patch, update, watch
authentication.k8s.io	tokenreviews	create
authentication.k8s.io	*	create, delete, get, list, patch, update, watch
authentication.k8s.io	subjectaccessreviews	create
authorization.k8s.io	subjectaccessreviews	create
authorization.k8s.io	*	create, delete, get, list, patch, update, watch
*	*	*, get, list
admissionregistration.k8s.io	*	*, create, delete, get, list, patch, update, watch
apiextensions.k8s.io	customresourcedefinitions	create, delete, get, list, patch, update, watch
apiextensions.k8s.io	customresourcedefinitions/status	get, patch, update
konveyor.openshift.io	*	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	containerruntimeconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	kubeletconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigpools	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigpools/finalizers	update
machineconfiguration.openshift.io	machineconfigpools/status	get, list, watch
operator.ibm.com	ibmusagemeterings	create, delete, get, list, patch, update, watch
operator.ibm.com	ibmusagemeterings/finalizers	update
operator.ibm.com	ibmusagemeterings/status	get, patch, update
operator.ibm.com	commonservices	get, list, watch
operator.ibm.com	namespacescopes	get, list, watch
operator.ibm.com	operandrequests	get, list
csi.ibm.com	*	*
security.openshift.io	*	*
security.openshift.io	securitycontextconstraints	use
coordination	*	create, delete, get, list, patch, update, watch
packages.operators.coreos.com	*	create, delete, get, list, patch, update, watch
policy	*	create, delete, get, list, patch, update, watch
policy	poddisruptionbudgets	create, delete, get, list, patch, update, watch
policy	poddisruptionbudgets/finalizers	update
policy	poddisruptionbudgets/status	get, patch, update
csi.ceph.io	drivers	get, list, patch, update, watch
lvm.topolvm.io	lvmclusters	create, delete, get, list, patch, update, watch
lvm.topolvm.io	lvmclusters/status	create, delete, get, list, patch, update, watch
lvm.topolvm.io	lvmclusters/finalizers	update
snapshot.storage.k8s.io	volumesnapshotclasses	create, delete, get, list, patch, update, watch
ramendr.openshift.io	volumereplicationgroups	get, list, watch
spp-data-protection.isf.ibm.com	recipes	get, list, watch
zen.cpd.ibm.com	zenservices	get, list
batch	jobs	get, list, watch
batch	jobs/status	get, list, watch
batch	cronjobs	create, delete, get, list, update, watch
dataprotectionagent.idp.ibm.com	dataprotectionagents	get, list, watch
kubevirt.io	virtualmachines	get, list, watch
kubevirt.io	virtualmachines/finalizers	update
kubevirt.io	virtualmachines/status	get, list, watch
nmstate.io	nodenetworkstates	get, list, watch
nmstate.io	nodenetworkstates/finalizers	update
nmstate.io	nodenetworkstates/status	get, list, watch
events.k8s.io	events	get, list, watch
k8s.cni.cncf.io	network-attachment-definitions	get, list
metrics.k8s.io	nodes	get, list, watch
machine.openshift.io	machinesets	create, get, list, update, watch
metal3.io	baremetalhosts	create, get, list, update, watch
user.openshift.io	groups	get, list, watch
user.openshift.io	users	get, list, watch

Namespace Permissions¶

Group	Resource	Verbs
""	configmaps	create, delete, get, list, patch, update, watch
""	leases	create, delete, get, list, patch, update, watch
""	events	create, patch
""	pods	list
""	pods/log	get, list, watch
""	serviceaccounts	create, get
""	secrets	create, delete, get, update
""	serviceaccounts/token	create, get, list
coordination.k8s.io	configmaps	create, delete, get, list, patch, update, watch
coordination.k8s.io	leases	create, delete, get, list, patch, update, watch
monitoring.coreos.com	servicemonitors	create, get