IBM Storage Fusion v2.8.0¤

Install Modes¤

Mode	Supported
OwnNamespace	True
SingleNamespace	True
MultiNamespace	False
AllNamespaces	False

Service Accounts¤

isf-serviceability-operator-controller-manager
isf-ui-operator-controller-manager

Cluster Permissions¤

Group	Resource	Verbs
""	configmaps	create, delete, get, list, patch, update, watch
""	nodes	create, delete, get, list, patch, update, watch
""	secrets	create, delete, get, list, patch, update, watch
""	services	create, delete, get, list, patch, update, watch
""	events	create, get, list, patch, update, watch
""	namespaces	create, delete, get, list, patch, update, watch
""	pods	create, delete, get, list, patch, update, watch
""	serviceaccounts	create, delete, get, list, patch, update, watch
""	leases	create, delete, get, list, patch, update, watch
""	persistentvolumes	create, delete, get, list, patch, update, watch
""	persistentvolumes/finalizers	update
""	persistentvolumes/status	get, patch, update
""	endpoints	get, list, watch
""	namespaces/finalizers	update
""	namespaces/status	get, patch, update
""	persistentvolumeclaims	create, delete, get, list, patch, update, watch
""	serviceaccounts/token	create, get, list
""	nodes/finalizers	update
""	nodes/status	get, patch, update
""	persistentvolumeclaims/finalizers	update
""	persistentvolumeclaims/status	get, patch, update
""	pods/finalizers	update
""	pods/status	get, patch, update
""	secrets/finalizers	update
""	secrets/status	get, patch, update
""	pods/log	get, list, watch
""	pvc	create, delete, get, list, patch, update, watch
*	*	get, list
admissionregistration.k8s.io	*	*, create, delete, get, list, patch, update, watch
apiextensions.k8s.io	customresourcedefinitions	create, delete, get, list, patch, update, watch
apiextensions.k8s.io	customresourcedefinitions/status	get, patch, update
apps	deployments	create, delete, get, list, patch, update, watch
apps	*	create, delete, get, list, patch, update, watch
apps	statefulsets	create, get, list, update, watch
authorization.openshift.io	clusterrolebindings	list
authorization.openshift.io	rolebindings	list
certificates.k8s.io	certificatesigningrequests	create, get, list, patch, update, watch
certificates.k8s.io	certificatesigningrequests/approval	get, list, update, watch
certificates.k8s.io	certificatesigningrequests/status	create, get, list, update, watch
certificates.k8s.io	signers	approve, get, list, watch
cns.isf.ibm.com	scalemanagers	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	encryptionclients	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	encryptionclients/finalizers	update
cns.isf.ibm.com	encryptionclients/status	get, patch, update
cns.isf.ibm.com	encryptionservers	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	encryptionservers/finalizers	update
cns.isf.ibm.com	encryptionservers/status	get, patch, update
cns.isf.ibm.com	scaleclusters	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	scaleclusters/finalizers	update
cns.isf.ibm.com	scaleclusters/status	get, patch, update
cns.isf.ibm.com	scalemanagers/finalizers	update
cns.isf.ibm.com	scalemanagers/status	get, patch, update
cns.isf.ibm.com	sncfilesystems	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	sncfilesystems/finalizers	update
cns.isf.ibm.com	sncfilesystems/status	get, patch, update
cns.isf.ibm.com	sncnodes	create, delete, get, list, patch, update, watch
cns.isf.ibm.com	sncnodes/finalizers	update
cns.isf.ibm.com	sncnodes/status	get, patch, update
cns.isf.ibm.com	*	create, get, list, patch, update, watch
config.openshift.io	*	create, delete, get, list, patch, update, watch
config.openshift.io	clusterversions	get, list, patch, update, watch
config.openshift.io	infrastructures	get, list, watch
config.openshift.io	clusteroperators	get, list, watch
config.openshift.io	clusteroperators/finalizers	update
config.openshift.io	clusteroperators/status	get, list, watch
config.openshift.io	clusterversions/status	get, patch, update
config.openshift.io	ingresses	get
console.openshift.io	*	create, delete, get, list, patch, update, watch
console.openshift.io	consoleplugins	create, delete, get, list, update, watch
data-protection.isf.ibm.com	backupstoragelocations	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backupstoragelocations/finalizers	update
data-protection.isf.ibm.com	backupstoragelocations/status	get, patch, update
data-protection.isf.ibm.com	backuppolicies	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backuppolicies/status	get, patch, update
data-protection.isf.ibm.com	backups	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	backups/status	get, patch, update
data-protection.isf.ibm.com	deletebackuprequests	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	deletebackuprequests/finalizers	update
data-protection.isf.ibm.com	deletebackuprequests/status	get, patch, update
data-protection.isf.ibm.com	policyassignments	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	policyassignments/finalizers	update
data-protection.isf.ibm.com	policyassignments/status	get, patch, update
data-protection.isf.ibm.com	restores	create, delete, get, list, patch, update, watch
data-protection.isf.ibm.com	restores/finalizers	update
data-protection.isf.ibm.com	restores/status	get, patch, update
data-protection.isf.ibm.com	backuppolicies/finalizers	update
data-protection.isf.ibm.com	backups/finalizers	update
install.isf.ibm.com	computeprovisionworkers	create, delete, get, list, patch, update, watch
install.isf.ibm.com	computeprovisionworkers/finalizers	update
install.isf.ibm.com	computeprovisionworkers/status	get, patch, update
install.isf.ibm.com	storagesetups	create, delete, get, list, patch, update, watch
konveyor.openshift.io	*	create, delete, get, list, patch, update, watch
machine.openshift.io	machinesets	create, get, list, update, watch
machineconfiguration.openshift.io	containerruntimeconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	kubeletconfigs	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigpools	create, delete, get, list, patch, update, watch
machineconfiguration.openshift.io	machineconfigpools/finalizers	update
machineconfiguration.openshift.io	machineconfigpools/status	get, list, watch
metal3.io	baremetalhosts	create, get, list, update, watch
metal3.io	baremetalhosts/status	get
metrodr.isf.ibm.com	*	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	metrodrs	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	metrodrinits	create, delete, get, list, patch, update, watch
metrodr.isf.ibm.com	metrodrinits/finalizers	update
metrodr.isf.ibm.com	metrodrinits/status	get
mgmtsft.isf.ibm.com	isfchdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfchdeps/finalizers	update
mgmtsft.isf.ibm.com	isfchdeps/status	get, patch, update
mgmtsft.isf.ibm.com	isfconsoleplugins	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfconsoleplugins/finalizers	update
mgmtsft.isf.ibm.com	isfconsoleplugins/status	get, patch, update
mgmtsft.isf.ibm.com	isfemdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfemdeps/finalizers	update
mgmtsft.isf.ibm.com	isfemdeps/status	get, patch, update
mgmtsft.isf.ibm.com	isflcdeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isflcdeps/finalizers	update
mgmtsft.isf.ibm.com	isflcdeps/status	get, patch, update
mgmtsft.isf.ibm.com	isfproxydeps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfproxydeps/finalizers	update
mgmtsft.isf.ibm.com	isfproxydeps/status	get, patch, update
mgmtsft.isf.ibm.com	isfuideps	create, delete, get, list, patch, update, watch
mgmtsft.isf.ibm.com	isfuideps/finalizers	update
mgmtsft.isf.ibm.com	isfuideps/status	get, patch, update
monitor.isf.ibm.com	nodeconfigs	create, delete, get, list, patch, update, watch
monitor.isf.ibm.com	nodeconfigs/finalizers	update
monitor.isf.ibm.com	nodeconfigs/status	get, patch, update
monitor.isf.ibm.com	systemhealths	create, delete, get, list, patch, update, watch
oauth.openshift.io	oauthclients	create, delete, get, list, patch, update, watch
oauth.openshift.io	*	create, delete, get, list, patch, update, watch
ocs.openshift.io	storageclusters	create, delete, get, list, patch, update, watch
ocs.openshift.io	storageclusters/finalizers	update
ocs.openshift.io	storageclusters/status	get, patch, update
ocs.openshift.io	ocsinitializations	create, delete, get, list, update, watch
ocs.openshift.io	storageclassclaims	create, delete, get, list, update, watch
ocs.openshift.io	storageclassclaims/status	get, update
ocs.openshift.io	storageclients	create, delete, get, list, update, watch
ocs.openshift.io	storageclients/status	get, update
ocs.openshift.io	storageprofiles	create, delete, get, list, update, watch
ocs.openshift.io	storageprofiles/status	get, update
odf.isf.ibm.com	odfmanagers	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfclusters	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfclusters/finalizers	update
odf.isf.ibm.com	odfclusters/status	get, patch, update
odf.isf.ibm.com	odfmanagers/finalizers	create, delete, get, list, patch, update, watch
odf.isf.ibm.com	odfmanagers/status	create, delete, get, list, patch, update, watch
operators.coreos.com	*	create, delete, get, list, patch, update, watch
operators.coreos.com	subscriptions	create, delete, get, list, patch, update, watch
operators.coreos.com	subscriptions/finalizers	update
operators.coreos.com	subscriptions/status	get, patch, update
operators.coreos.com	clusterserviceversions	get, list
prereq.isf.ibm.com	spectrumfusions	create, delete, get, list, patch, update, watch
prereq.isf.ibm.com	spectrumfusions/finalizers	update
prereq.isf.ibm.com	spectrumfusions/status	get, patch, update
project.openshift.io	projects	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	*	*
rbac.authorization.k8s.io	clusterrolebindings	*, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	clusterroles	*, create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	rolebindings	create, delete, get, list, patch, update, watch
rbac.authorization.k8s.io	roles	create, delete, get, list, patch, update, watch
route.openshift.io	routes	create, delete, get, list, patch, update, watch
route.openshift.io	*	create, delete, get, list, patch, update, watch
service.isf.ibm.com	fusionservicedefinitions	create, delete, get, list, patch, update, watch
service.isf.ibm.com	fusionservicedefinitions/finalizers	update
service.isf.ibm.com	fusionservicedefinitions/status	get, patch, update
service.isf.ibm.com	fusionserviceinstances	create, delete, get, list, patch, update, watch
service.isf.ibm.com	fusionserviceinstances/finalizers	update
service.isf.ibm.com	fusionserviceinstances/status	get, patch, update
service.isf.ibm.com	*	create, get, list, patch, update, watch
storage.isf.ibm.com	scales	create, delete, get, list, patch, update, watch
storage.isf.ibm.com	scales/status	get, list, watch
storage.isf.ibm.com	*	create, get, list, patch, update, watch
systemhealth.isf.ibm.com	healthmanagers	create, delete, get, list, patch, update, watch
systemhealth.isf.ibm.com	healthmanagers/finalizers	update
systemhealth.isf.ibm.com	healthmanagers/status	get, patch, update
update.isf.ibm.com	updatemanagers	create, delete, get, list, patch, update, watch
update.isf.ibm.com	updatemanagers/finalizers	update
update.isf.ibm.com	updatemanagers/status	get, patch, update
authentication.k8s.io	tokenreviews	create
authentication.k8s.io	*	create, delete, get, list, patch, update, watch
authorization.k8s.io	subjectaccessreviews	create
authorization.k8s.io	*	create, delete, get, list, patch, update, watch
application.isf.ibm.com	applications	create, delete, get, list, patch, update, watch
application.isf.ibm.com	clusters	create, delete, get, list, patch, update, watch
application.isf.ibm.com	clusters/finalizers	patch, update
application.isf.ibm.com	clusters/status	get, patch, update
application.isf.ibm.com	applications/finalizers	update
application.isf.ibm.com	applications/status	get, patch, update
application.isf.ibm.com	connections	create, delete, get, list, patch, update, watch
application.isf.ibm.com	connections/finalizers	update
application.isf.ibm.com	connections/status	get, patch, update
spp-data-protection.isf.ibm.com	recipes	get, list, watch
ceph.rook.io	cephclusters	list, watch
ceph.rook.io	cephclusters/status	get
coordination	*	create, delete, get, list, patch, update, watch
coordination.k8s.io	configmaps	create, delete, get, list, patch, update, watch
coordination.k8s.io	leases	create, delete, get, list, patch, update, watch
csi.ibm.com	*	*
discovery.k8s.io	*	create, delete, get, list, patch, update, watch
local.storage.openshift.io	*	create, delete, get, list, patch, update, watch
local.storage.openshift.io	localvolumediscoveryresults	create, delete, get, list, update, watch
local.storage.openshift.io	localvolumes	create, delete, get, list, update, watch
local.storage.openshift.io	localvolumes/status	get, update
local.storage.openshift.io	localvolumesets	create, delete, get, list, update, watch
local.storage.openshift.io	localvolumesets/status	get, update
local.storage.openshift.io	localvolumediscoveries	get, list
lvm.topolvm.io	lvmclusters	create, delete, get, list, patch, update, watch
lvm.topolvm.io	lvmclusters/status	create, delete, get, list, patch, update, watch
monitoring.coreos.com	*	create, delete, get, list, patch, update, watch
monitoring.coreos.com	prometheusrules	create, delete, get, list, update, watch
monitoring.coreos.com	servicemonitors	create, delete, get, list, update, watch
operator.openshift.io	*	create, delete, get, list, patch, update, watch
operator.openshift.io	consoles	get, list, patch, update, watch
operator.openshift.io	networks	get, list, patch, update, watch
packages.operators.coreos.com	*	create, delete, get, list, patch, update, watch
policy	*	create, delete, get, list, patch, update, watch
policy	poddisruptionbudgets	create, delete, get, list, patch, update, watch
policy	poddisruptionbudgets/finalizers	update
policy	poddisruptionbudgets/status	get, patch, update
scale.spectrum.ibm.com	*	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	callhomes	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	clusters	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	daemons	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	encryptionconfigs	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	filesystems	create, delete, get, list, patch, update, watch
scale.spectrum.ibm.com	remoteclusters	create, delete, get, list, patch, update, watch
security.openshift.io	*	*
security.openshift.io	securitycontextconstraints	use
snapshot.storage.k8s.io	volumesnapshotclasses	create, delete, get, list, patch, update, watch
storage.k8s.io	*	create, delete, get, list, patch, update, watch
storage.k8s.io	storageclasses	create, delete, get, list, patch, update, watch
operator.ibm.com	namespacescopes	get, list, watch
operator.ibm.com	operandrequests	get, list
ramendr.openshift.io	volumereplicationgroups	get, list, watch
rdr.isf.ibm.com	regionaldrs	create, get, list, update, watch
zen.cpd.ibm.com	zenservices	get, list
firmware.isf.ibm.com	computefirmwares	get, list, patch, update, watch
firmware.isf.ibm.com	computefirmwares/status	get, patch, update
kubevirt.io	virtualmachines	get, list, watch
kubevirt.io	virtualmachines/finalizers	update
kubevirt.io	virtualmachines/status	get, list, watch
network.isf.ibm.com	switches	create, delete, get, list, patch, update, watch
network.isf.ibm.com	switches/status	get, patch, update
network.isf.ibm.com	switchupgrades	get, list, patch, update, watch
network.isf.ibm.com	switchupgrades/status	get, patch, update
network.isf.ibm.com	links	create, delete, get, list, patch, update, watch
network.isf.ibm.com	switchlinks	get, list
network.isf.ibm.com	switchvlans	get, list
network.isf.ibm.com	vlans	create, delete, get, list, patch, update, watch
configuration.isf.ibm.com	computeconfigurations	create, delete, get, list, patch, update, watch
dataprotection.isf.ibm.com	metrodrdataprotections	create, delete, get, list, patch, update, watch
dataprotectionserver.idp.ibm.com	dataprotectionservers	list
init.isf.ibm.com	networkinits	create, get, list, update
initialization.isf.ibm.com	computeinits	get, list, patch, update
maintenance.isf.ibm.com	computemaintenances	create, delete, get, list, patch, update, watch
monitoring.isf.ibm.com	computemonitorings	create, delete, get, list, patch, update, watch
networking.k8s.io	networkpolicies	create, delete, get, list, patch, update, watch
powerop.isf.ibm.com	computepowerops	create, delete, get, list, patch, update, watch
rackimport.isf.ibm.com	rackinfoes	get, list, patch, update
satellite.isf.ibm.com	ics	create, delete, get, list, patch, update, watch

Namespace Permissions¤

Group	Resource	Verbs
""	configmaps	create, delete, get, list, patch, update, watch
""	events	create, patch
""	leases	create, delete, get, list, patch, update, watch
coordination.k8s.io	leases	create, delete, get, list, patch, update, watch
coordination.k8s.io	configmaps	create, delete, get, list, patch, update, watch