apiVersion: v1
items:
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-admin: "true"
  apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that has edit rights within the project and
        can change the project's membership.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: admin
    namespace: ""
    resourceVersion: "4993"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/admin
    uid: 212f5f5b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - automationbroker.io
    attributeRestrictions: null
    resources:
    - access
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - rolebindingrestrictions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - admin
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - update
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:49:45Z
    name: alertmanager-main
    namespace: ""
    resourceVersion: "4368"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/alertmanager-main
    uid: c537762a-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:51:53Z
    name: asb-access
    namespace: ""
    resourceVersion: "4997"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/asb-access
    uid: 11767e55-b1c7-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /osb
    - /osb/*
    resources: []
    verbs:
    - delete
    - get
    - patch
    - post
    - put
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:51:51Z
    name: asb-auth
    namespace: ""
    resourceVersion: "4988"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/asb-auth
    uid: 0ff3e7cd-b1c7-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - create
    - delete
  - apiGroups:
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - subjectrulesreview
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - image.openshift.io
    - ""
    attributeRestrictions: null
    resources:
    - images
    verbs:
    - get
    - list
  - apiGroups:
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    - netnamespaces
    verbs:
    - get
  - apiGroups:
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - netnamespaces
    verbs:
    - update
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
  - apiGroups:
    - automationbroker.io
    attributeRestrictions: null
    resources:
    - bundlebindings
    - bundleinstances
    - bundles
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:51:52Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    name: asb-user-access
    namespace: ""
    resourceVersion: "4991"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/asb-user-access
    uid: 10a5a0b8-b1c7-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - automationbroker.io
    attributeRestrictions: null
    resources:
    - access
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that can get basic information about projects.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: basic-user
    namespace: ""
    resourceVersion: "111"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/basic-user
    uid: 21365f24-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - user.openshift.io
    attributeRestrictions: null
    resourceNames:
    - "~"
    resources:
    - users
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projectrequests
    verbs:
    - list
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - clusterroles
    verbs:
    - get
    - list
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - clusterroles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - selfsubjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - selfsubjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-24T13:31:46Z
    name: che-operator
    namespace: ""
    resourceVersion: "1052389"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/che-operator
    uid: 0d06dbea-b61f-11ea-a015-fa163eb79b57
  rules:
  - apiGroups:
    - oauth.openshift.io
    attributeRestrictions: null
    resources:
    - oauthclients
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    attributeRestrictions: null
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    attributeRestrictions: null
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    attributeRestrictions: null
    resources:
    - consolelinks
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: cluster-admin
    namespace: ""
    resourceVersion: "218"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-admin
    uid: 212d93c7-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - '*'
    resources: []
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: cluster-debugger
    namespace: ""
    resourceVersion: "91"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-debugger
    uid: 2130795b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /debug/pprof
    - /debug/pprof/*
    - /metrics
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"name":"cluster-monitoring-operator","namespace":""},"rules":[{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterrolebindings","clusterroles","rolebindings","roles"],"verbs":["create","delete","get","list","update","watch"]},{"apiGroups":[""],"resources":["configmaps","serviceaccounts"],"verbs":["create","delete","get","list","update","watch"]},{"apiGroups":["apps"],"resources":["daemonsets","deployments"],"verbs":["create","delete","get","list","update","watch"]},{"apiGroups":["route.openshift.io"],"resources":["routes"],"verbs":["create","delete","get","list","update","watch"]},{"apiGroups":["security.openshift.io"],"resources":["securitycontextconstraints"],"verbs":["create","delete","get","list","update","watch"]},{"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"],"verbs":["create"]},{"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"],"verbs":["create"]},{"apiGroups":["apps"],"resources":["daemonsets","deployments","replicasets","statefulsets"],"verbs":["list","watch"]},{"apiGroups":["extensions"],"resources":["daemonsets","deployments","replicasets"],"verbs":["list","watch"]},{"apiGroups":["autoscaling"],"resources":["horizontalpodautoscalers"],"verbs":["list","watch"]},{"apiGroups":["batch"],"resources":["cronjobs","jobs"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["configmaps","endpoints","limitranges","namespaces","nodes","persistentvolumeclaims","persistentvolumes","pods","replicationcontrollers","resourcequotas","secrets","services"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["pods"],"verbs":["get"]},{"apiGroups":["apps"],"resourceNames":["kube-state-metrics"],"resources":["deployments"],"verbs":["get","update"]},{"apiGroups":["extensions"],"resourceNames":["kube-state-metrics"],"resources":["deployments"],"verbs":["get","update"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get"]},{"apiGroups":[""],"resources":["nodes/metrics"],"verbs":["get"]},{"nonResourceURLs":["/metrics"],"verbs":["get"]},{"apiGroups":[""],"resources":["configmaps"],"verbs":["get"]},{"apiGroups":[""],"resources":["endpoints","nodes","pods","services"],"verbs":["get","list","watch"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["list","watch"]},{"apiGroups":["monitoring.coreos.com"],"resources":["alertmanagers","alertmanagers/finalizers","prometheuses","prometheuses/finalizers","prometheusrules","servicemonitors"],"verbs":["*"]},{"apiGroups":[""],"resources":["configmaps","secrets"],"verbs":["*"]},{"apiGroups":["apps"],"resources":["statefulsets"],"verbs":["*"]},{"apiGroups":[""],"resources":["endpoints","services"],"verbs":["create","get","update"]},{"apiGroups":[""],"resources":["pods"],"verbs":["delete","list"]},{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["*"]}]}
    creationTimestamp: 2020-06-19T00:48:02Z
    name: cluster-monitoring-operator
    namespace: ""
    resourceVersion: "3807"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-monitoring-operator
    uid: 87c62a07-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - serviceaccounts
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - securitycontextconstraints
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - replicasets
    - statefulsets
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - replicasets
    verbs:
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - limitranges
    - namespaces
    - nodes
    - persistentvolumeclaims
    - persistentvolumes
    - pods
    - replicationcontrollers
    - resourcequotas
    - secrets
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - get
  - apiGroups:
    - apps
    attributeRestrictions: null
    resourceNames:
    - kube-state-metrics
    resources:
    - deployments
    verbs:
    - get
    - update
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resourceNames:
    - kube-state-metrics
    resources:
    - deployments
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/metrics
    verbs:
    - get
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /metrics
    resources: []
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - nodes
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - monitoring.coreos.com
    attributeRestrictions: null
    resources:
    - alertmanagers
    - alertmanagers/finalizers
    - prometheuses
    - prometheuses/finalizers
    - prometheusrules
    - servicemonitors
    verbs:
    - '*'
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - secrets
    verbs:
    - '*'
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - '*'
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - apiextensions.k8s.io
    attributeRestrictions: null
    resources:
    - customresourcedefinitions
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:48:41Z
    name: cluster-monitoring-view
    namespace: ""
    resourceVersion: "3960"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-monitoring-view
    uid: 9f119e99-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-view: "true"
  apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: cluster-reader
    namespace: ""
    resourceVersion: "4573"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-reader
    uid: 212f00aa-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - componentstatuses
    - nodes
    - nodes/status
    - persistentvolumeclaims/status
    - persistentvolumes
    - persistentvolumes/status
    - pods/binding
    - pods/eviction
    - podtemplates
    - securitycontextconstraints
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    attributeRestrictions: null
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets/status
    - deployments/status
    - replicasets/status
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    attributeRestrictions: null
    resources:
    - customresourcedefinitions
    - customresourcedefinitions/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiregistration.k8s.io
    attributeRestrictions: null
    resources:
    - apiservices
    - apiservices/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs/status
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets/status
    - deployments/status
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    - ingresses/status
    - jobs
    - jobs/status
    - podsecuritypolicies
    - replicasets/status
    - replicationcontrollers
    - storageclasses
    - thirdpartyresources
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - events.k8s.io
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets/status
    - podsecuritypolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    - volumeattachments
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - scheduling.k8s.io
    attributeRestrictions: null
    resources:
    - priorityclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindingrestrictions
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagesignatures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - oauth.openshift.io
    attributeRestrictions: null
    resources:
    - oauthclientauthorizations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projectrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - clusterresourcequotas
    - clusterresourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - securitycontextconstraints
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - rangeallocations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - brokertemplateinstances
    - templateinstances/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - user.openshift.io
    attributeRestrictions: null
    resources:
    - groups
    - identities
    - useridentitymappings
    - users
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - resourceaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/stats
    verbs:
    - create
    - get
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - '*'
    resources: []
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/description: A user that can get basic cluster status information.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: cluster-status
    namespace: ""
    resourceVersion: "117"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/cluster-status
    uid: 2138648f-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /healthz
    - /healthz/*
    resources: []
    verbs:
    - get
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /
    - /.well-known
    - /.well-known/*
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /oapi
    - /oapi/*
    - /openapi/v2
    - /osapi
    - /osapi/
    - /swagger-2.0.0.pb-v1
    - /swagger.json
    - /swaggerapi
    - /swaggerapi/*
    - /version
    - /version/*
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T05:55:52Z
    name: codeready-operator
    namespace: ""
    resourceVersion: "45098"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/codeready-operator
    uid: 88daa273-b1f1-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - oauth.openshift.io
    attributeRestrictions: null
    resources:
    - oauthclients
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    attributeRestrictions: null
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    attributeRestrictions: null
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    attributeRestrictions: null
    resources:
    - consolelinks
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-edit: "true"
  apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that can create and edit most objects in a
        project, but can not update the project's membership.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: edit
    namespace: ""
    resourceVersion: "4992"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/edit
    uid: 212fcd1e-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - automationbroker.io
    attributeRestrictions: null
    resources:
    - access
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:48:41Z
    name: grafana
    namespace: ""
    resourceVersion: "3961"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/grafana
    uid: 9f140d39-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:45:49Z
    name: hawkular-metrics-admin
    namespace: ""
    resourceVersion: "2823"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/hawkular-metrics-admin
    uid: 383f2918-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - hawkular-alerts
    - hawkular-metrics
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:24Z
    name: kube-state-metrics
    namespace: ""
    resourceVersion: "4680"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/kube-state-metrics
    uid: dc199a38-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - limitranges
    - namespaces
    - nodes
    - persistentvolumeclaims
    - persistentvolumes
    - pods
    - replicationcontrollers
    - resourcequotas
    - secrets
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - replicasets
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - replicasets
    - statefulsets
    verbs:
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:45:48Z
    name: management-infra-admin
    namespace: ""
    resourceVersion: "2820"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/management-infra-admin
    uid: 37766063-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/log
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/proxy
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:03Z
    name: namespace-viewer
    namespace: ""
    resourceVersion: "4521"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/namespace-viewer
    uid: cfd200fb-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    attributeRestrictions: null
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:16Z
    name: node-exporter
    namespace: ""
    resourceVersion: "4583"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/node-exporter
    uid: d737e540-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:49:02Z
    name: prometheus-k8s
    namespace: ""
    resourceVersion: "4128"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/prometheus-k8s
    uid: ab526733-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/metrics
    verbs:
    - get
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /metrics
    resources: []
    verbs:
    - get
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:48:15Z
    name: prometheus-operator
    namespace: ""
    resourceVersion: "3875"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/prometheus-operator
    uid: 8f7a1c21-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    attributeRestrictions: null
    resources:
    - customresourcedefinitions
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    attributeRestrictions: null
    resources:
    - alertmanagers
    - alertmanagers/finalizers
    - prometheuses
    - prometheuses/finalizers
    - prometheusrules
    - servicemonitors
    verbs:
    - '*'
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - '*'
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - secrets
    verbs:
    - '*'
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: registry-admin
    namespace: ""
    resourceVersion: "155"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/registry-admin
    uid: 2144b05a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - delete
    - get
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: registry-editor
    namespace: ""
    resourceVersion: "157"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/registry-editor
    uid: 214557c1-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: registry-viewer
    namespace: ""
    resourceVersion: "160"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/registry-viewer
    uid: 214625cc-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:02Z
    name: sar-creator
    namespace: ""
    resourceVersion: "4518"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/sar-creator
    uid: cf4aeb29-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - subjectaccessreviews.authorization.k8s.io
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: self-access-reviewer
    namespace: ""
    resourceVersion: "113"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/self-access-reviewer
    uid: 21372608-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - selfsubjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - selfsubjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/description: A user that can request projects.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: self-provisioner
    namespace: ""
    resourceVersion: "115"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/self-provisioner
    uid: 2137caf3-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projectrequests
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:04Z
    name: service-catalog-controller
    namespace: ""
    resourceVersion: "4525"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/service-catalog-controller
    uid: d0919488-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - clusterservicebrokers/status
    - clusterserviceclasses/status
    - clusterserviceplans/status
    - servicebindings/finalizers
    - servicebindings/status
    - servicebrokers/status
    - serviceclasses/status
    - serviceinstances/reference
    - serviceinstances/status
    - serviceplans/status
    verbs:
    - update
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - clusterservicebrokers
    - servicebindings
    - servicebrokers
    - serviceinstances
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - clusterserviceclasses
    - clusterserviceplans
    - serviceclasses
    - serviceplans
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:01Z
    name: servicecatalog-serviceclass-viewer
    namespace: ""
    resourceVersion: "4483"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/servicecatalog-serviceclass-viewer
    uid: ce4935c9-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - clusterserviceclasses
    - clusterserviceplans
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:07Z
    name: servicecatalog.k8s.io:service-catalog-readiness
    namespace: ""
    resourceVersion: "4542"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/servicecatalog.k8s.io%3Aservice-catalog-readiness
    uid: d26103cd-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /healthz/ready
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: storage-admin
    namespace: ""
    resourceVersion: "102"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/storage-admin
    uid: 21341222-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: sudoer
    namespace: ""
    resourceVersion: "81"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/sudoer
    uid: 212d9f14-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - user.openshift.io
    attributeRestrictions: null
    resourceNames:
    - system:admin
    resources:
    - systemusers
    - users
    verbs:
    - impersonate
  - apiGroups:
    - ""
    - user.openshift.io
    attributeRestrictions: null
    resourceNames:
    - system:masters
    resources:
    - groups
    - systemgroups
    verbs:
    - impersonate
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    name: system:aggregate-to-admin
    namespace: ""
    resourceVersion: "225"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aaggregate-to-admin
    uid: 2130fff3-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    name: system:aggregate-to-edit
    namespace: ""
    resourceVersion: "226"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aaggregate-to-edit
    uid: 2131bed3-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    name: system:aggregate-to-view
    namespace: ""
    resourceVersion: "227"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aaggregate-to-view
    uid: 21326102-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:auth-delegator
    namespace: ""
    resourceVersion: "235"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aauth-delegator
    uid: 21366bef-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:aws-cloud-provider
    namespace: ""
    resourceVersion: "245"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aaws-cloud-provider
    uid: 213a8f6c-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - patch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:basic-user
    namespace: ""
    resourceVersion: "220"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abasic-user
    uid: 212e8b7a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:build-controller
    namespace: ""
    resourceVersion: "185"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abuild-controller
    uid: 215041d1-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:build-strategy-custom
    namespace: ""
    resourceVersion: "96"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abuild-strategy-custom
    uid: 2131ee27-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/custom
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:build-strategy-docker
    namespace: ""
    resourceVersion: "94"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abuild-strategy-docker
    uid: 21312297-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/docker
    - builds/optimizeddocker
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:build-strategy-jenkinspipeline
    namespace: ""
    resourceVersion: "100"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abuild-strategy-jenkinspipeline
    uid: 213300b0-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/jenkinspipeline
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:build-strategy-source
    namespace: ""
    resourceVersion: "98"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Abuild-strategy-source
    uid: 213282d8-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/source
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:certificate-signing-controller
    namespace: ""
    resourceVersion: "183"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acertificate-signing-controller
    uid: 214f335b-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
    namespace: ""
    resourceVersion: "246"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acertificates.k8s.io%3Acertificatesigningrequests%3Anodeclient
    uid: 213b1d35-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests/nodeclient
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:certificates.k8s.io:certificatesigningrequests:selfnodeclient
    namespace: ""
    resourceVersion: "247"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acertificates.k8s.io%3Acertificatesigningrequests%3Aselfnodeclient
    uid: 213ba814-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests/selfnodeclient
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:attachdetach-controller
    namespace: ""
    resourceVersion: "133"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aattachdetach-controller
    uid: 213ced80-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - volumeattachments
    verbs:
    - create
    - delete
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:certificate-controller
    namespace: ""
    resourceVersion: "178"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Acertificate-controller
    uid: 214d09c3-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - update
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:clusterrole-aggregation-controller
    namespace: ""
    resourceVersion: "135"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aclusterrole-aggregation-controller
    uid: 213ddc09-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - '*'
    resources: []
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:cronjob-controller
    namespace: ""
    resourceVersion: "137"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Acronjob-controller
    uid: 213ec2ae-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - jobs
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs/status
    verbs:
    - update
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:daemon-set-controller
    namespace: ""
    resourceVersion: "139"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Adaemon-set-controller
    uid: 213f7e9a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/binding
    verbs:
    - create
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:deployment-controller
    namespace: ""
    resourceVersion: "141"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Adeployment-controller
    uid: 21400bcc-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments/finalizers
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:disruption-controller
    namespace: ""
    resourceVersion: "142"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Adisruption-controller
    uid: 2140c477-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:endpoint-controller
    namespace: ""
    resourceVersion: "144"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aendpoint-controller
    uid: 214146d4-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    verbs:
    - create
    - delete
    - get
    - list
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints/restricted
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:expand-controller
    namespace: ""
    resourceVersion: "146"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aexpand-controller
    uid: 2141cab8-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:generic-garbage-collector
    namespace: ""
    resourceVersion: "148"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Ageneric-garbage-collector
    uid: 2142a610-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:horizontal-pod-autoscaler
    namespace: ""
    resourceVersion: "150"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Ahorizontal-pod-autoscaler
    uid: 214356f0-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - update
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*/scale'
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resourceNames:
    - 'http:heapster:'
    - 'https:heapster:'
    resources:
    - services/proxy
    verbs:
    - get
  - apiGroups:
    - metrics.k8s.io
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - list
  - apiGroups:
    - custom.metrics.k8s.io
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:job-controller
    namespace: ""
    resourceVersion: "152"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Ajob-controller
    uid: 2143f0f4-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - jobs
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - jobs/status
    verbs:
    - update
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - jobs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:namespace-controller
    namespace: ""
    resourceVersion: "154"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Anamespace-controller
    uid: 21445b62-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces/finalize
    - namespaces/status
    verbs:
    - update
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - delete
    - deletecollection
    - get
    - list
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:node-controller
    namespace: ""
    resourceVersion: "156"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Anode-controller
    uid: 214500e6-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - delete
    - get
    - list
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:persistent-volume-binder
    namespace: ""
    resourceVersion: "158"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Apersistent-volume-binder
    uid: 214583f2-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - create
    - delete
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:pod-garbage-collector
    namespace: ""
    resourceVersion: "161"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Apod-garbage-collector
    uid: 21466d51-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:pv-protection-controller
    namespace: ""
    resourceVersion: "191"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Apv-protection-controller
    uid: 2154b150-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:pvc-protection-controller
    namespace: ""
    resourceVersion: "181"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Apvc-protection-controller
    uid: 214e9390-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:replicaset-controller
    namespace: ""
    resourceVersion: "162"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Areplicaset-controller
    uid: 21470c35-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:replication-controller
    namespace: ""
    resourceVersion: "164"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Areplication-controller
    uid: 21479a59-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:resourcequota-controller
    namespace: ""
    resourceVersion: "166"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aresourcequota-controller
    uid: 21484a0f-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:route-controller
    namespace: ""
    resourceVersion: "168"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aroute-controller
    uid: 21492d13-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - patch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:service-account-controller
    namespace: ""
    resourceVersion: "170"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aservice-account-controller
    uid: 2149bbf4-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:service-controller
    namespace: ""
    resourceVersion: "172"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Aservice-controller
    uid: 214abc4d-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:statefulset-controller
    namespace: ""
    resourceVersion: "174"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Astatefulset-controller
    uid: 214b7b05-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets/status
    verbs:
    - update
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - create
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:controller:ttl-controller
    namespace: ""
    resourceVersion: "176"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acontroller%3Attl-controller
    uid: 214c3182-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:csi-external-attacher
    namespace: ""
    resourceVersion: "244"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acsi-external-attacher
    uid: 2139fd80-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - volumeattachments
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:csi-external-provisioner
    namespace: ""
    resourceVersion: "242"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Acsi-external-provisioner
    uid: 21398722-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:daemonset-controller
    namespace: ""
    resourceVersion: "177"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adaemonset-controller
    uid: 214d058e-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to deploy within a project.  Used
        primarily with service accounts for automated deployments.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:deployer
    namespace: ""
    resourceVersion: "132"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adeployer
    uid: 213c9d99-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - delete
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/log
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - list
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamtags
    verbs:
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:deployment-controller
    namespace: ""
    resourceVersion: "187"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adeployment-controller
    uid: 21528a59-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:deploymentconfig-controller
    namespace: ""
    resourceVersion: "186"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adeploymentconfig-controller
    uid: 2151ca48-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:discovery
    namespace: ""
    resourceVersion: "219"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adiscovery
    uid: 212e0ea4-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /healthz
    - /openapi
    - /openapi/*
    - /swagger-2.0.0.pb-v1
    - /swagger.json
    - /swaggerapi
    - /swaggerapi/*
    - /version
    - /version/
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:disruption-controller
    namespace: ""
    resourceVersion: "179"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Adisruption-controller
    uid: 214d9e7d-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:endpoint-controller
    namespace: ""
    resourceVersion: "167"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aendpoint-controller
    uid: 2148cafc-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:garbage-collector-controller
    namespace: ""
    resourceVersion: "171"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Agarbage-collector-controller
    uid: 214a616c-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:gc-controller
    namespace: ""
    resourceVersion: "182"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Agc-controller
    uid: 214e96b0-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:heapster
    namespace: ""
    resourceVersion: "228"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aheapster
    uid: 2132fb59-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    - namespaces
    - nodes
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - deployments
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:hpa-controller
    namespace: ""
    resourceVersion: "175"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Ahpa-controller
    uid: 214c4c1d-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-auditor
    namespace: ""
    resourceVersion: "119"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-auditor
    uid: 2138fa64-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    verbs:
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to build, push and pull images from
        within a project.  Used primarily with service accounts for builds.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-builder
    namespace: ""
    resourceVersion: "126"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-builder
    uid: 213ad23c-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-pruner
    namespace: ""
    resourceVersion: "128"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-pruner
    uid: 213b79a1-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    - replicationcontrollers
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - limitranges
    verbs:
    - list
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - builds
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    verbs:
    - delete
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagestreams
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to pull images from within a project.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-puller
    namespace: ""
    resourceVersion: "122"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-puller
    uid: 213982c2-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to push and pull images from within
        a project.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-pusher
    namespace: ""
    resourceVersion: "124"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-pusher
    uid: 213a02a8-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:image-signer
    namespace: ""
    resourceVersion: "130"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aimage-signer
    uid: 213c1cb1-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagesignatures
    verbs:
    - create
    - delete
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:job-controller
    namespace: ""
    resourceVersion: "173"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Ajob-controller
    uid: 214b5d0d-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:kube-aggregator
    namespace: ""
    resourceVersion: "236"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Akube-aggregator
    uid: 2136e4a0-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:kube-controller-manager
    namespace: ""
    resourceVersion: "237"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Akube-controller-manager
    uid: 213772b1-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - secrets
    - serviceaccounts
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - delete
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - namespaces
    - secrets
    - serviceaccounts
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - secrets
    - serviceaccounts
    verbs:
    - update
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:kube-dns
    namespace: ""
    resourceVersion: "240"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Akube-dns
    uid: 21387b39-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:kube-scheduler
    namespace: ""
    resourceVersion: "238"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Akube-scheduler
    uid: 2137f0fc-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resourceNames:
    - kube-scheduler
    resources:
    - endpoints
    verbs:
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - pods/binding
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - replicasets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:kubelet-api-admin
    namespace: ""
    resourceVersion: "233"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Akubelet-api-admin
    uid: 21356566-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - proxy
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/log
    - nodes/metrics
    - nodes/proxy
    - nodes/spec
    - nodes/stats
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:master
    namespace: ""
    resourceVersion: "134"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Amaster
    uid: 213d334b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - '*'
    attributeRestrictions: null
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - '*'
    resources: []
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:namespace-controller
    namespace: ""
    resourceVersion: "180"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anamespace-controller
    uid: 214e1af3-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:node
    namespace: ""
    resourceVersion: "229"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode
    uid: 2133cc5f-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - delete
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods/eviction
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - secrets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    verbs:
    - get
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims/status
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - volumeattachments
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:node-admin
    namespace: ""
    resourceVersion: "143"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode-admin
    uid: 2140c958-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - proxy
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/log
    - nodes/metrics
    - nodes/proxy
    - nodes/spec
    - nodes/stats
    verbs:
    - '*'
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:node-bootstrapper
    namespace: ""
    resourceVersion: "234"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode-bootstrapper
    uid: 2135e334-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests
    verbs:
    - create
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:node-problem-detector
    namespace: ""
    resourceVersion: "230"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode-problem-detector
    uid: 21345036-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - patch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:node-proxier
    namespace: ""
    resourceVersion: "231"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode-proxier
    uid: 2134ea5d-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:node-reader
    namespace: ""
    resourceVersion: "145"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Anode-reader
    uid: 21415af2-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/stats
    verbs:
    - create
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:oauth-token-deleter
    namespace: ""
    resourceVersion: "136"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aoauth-token-deleter
    uid: 213e1c61-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - oauth.openshift.io
    attributeRestrictions: null
    resources:
    - oauthaccesstokens
    - oauthauthorizetokens
    verbs:
    - delete
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    name: system:openshift:aggregate-to-admin
    namespace: ""
    resourceVersion: "104"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-admin
    uid: 21349f1e-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - rolebindingrestrictions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - admin
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - update
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    name: system:openshift:aggregate-to-cluster-reader
    namespace: ""
    resourceVersion: "87"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-cluster-reader
    uid: 212fb616-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - componentstatuses
    - nodes
    - nodes/status
    - persistentvolumeclaims/status
    - persistentvolumes
    - persistentvolumes/status
    - pods/binding
    - pods/eviction
    - podtemplates
    - securitycontextconstraints
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    attributeRestrictions: null
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets/status
    - deployments/status
    - replicasets/status
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    attributeRestrictions: null
    resources:
    - customresourcedefinitions
    - customresourcedefinitions/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiregistration.k8s.io
    attributeRestrictions: null
    resources:
    - apiservices
    - apiservices/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs/status
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets/status
    - deployments/status
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    - ingresses/status
    - jobs
    - jobs/status
    - podsecuritypolicies
    - replicasets/status
    - replicationcontrollers
    - storageclasses
    - thirdpartyresources
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - events.k8s.io
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets/status
    - podsecuritypolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    - volumeattachments
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - scheduling.k8s.io
    attributeRestrictions: null
    resources:
    - priorityclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    attributeRestrictions: null
    resources:
    - certificatesigningrequests
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindingrestrictions
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagesignatures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - oauth.openshift.io
    attributeRestrictions: null
    resources:
    - oauthclientauthorizations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projectrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - clusterresourcequotas
    - clusterresourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - securitycontextconstraints
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - rangeallocations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - brokertemplateinstances
    - templateinstances/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - user.openshift.io
    attributeRestrictions: null
    resources:
    - groups
    - identities
    - useridentitymappings
    - users
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - resourceaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - localsubjectaccessreviews
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/stats
    verbs:
    - create
    - get
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - '*'
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    name: system:openshift:aggregate-to-edit
    namespace: ""
    resourceVersion: "106"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-edit
    uid: 2135514a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    name: system:openshift:aggregate-to-view
    namespace: ""
    resourceVersion: "108"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-view
    uid: 2135d17b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:build-config-change-controller
    namespace: ""
    resourceVersion: "189"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Abuild-config-change-controller
    uid: 2153b254-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds
    verbs:
    - delete
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:build-controller
    namespace: ""
    resourceVersion: "188"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Abuild-controller
    uid: 215328de-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds
    verbs:
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    verbs:
    - get
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/custom
    - builds/docker
    - builds/jenkinspipeline
    - builds/optimizeddocker
    - builds/source
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:cluster-quota-reconciliation-controller
    namespace: ""
    resourceVersion: "205"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Acluster-quota-reconciliation-controller
    uid: 2166cae6-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - clusterresourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:default-rolebindings-controller
    namespace: ""
    resourceVersion: "216"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adefault-rolebindings-controller
    uid: 2174dca0-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - rolebindings
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    attributeRestrictions: null
    resources:
    - rolebindings
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:deployer-controller
    namespace: ""
    resourceVersion: "190"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adeployer-controller
    uid: 21542ac8-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - delete
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:deploymentconfig-controller
    namespace: ""
    resourceVersion: "192"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adeploymentconfig-controller
    uid: 215660a7-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/status
    verbs:
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:horizontal-pod-autoscaler
    namespace: ""
    resourceVersion: "214"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Ahorizontal-pod-autoscaler
    uid: 2173d39b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/scale
    verbs:
    - get
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:image-import-controller
    namespace: ""
    resourceVersion: "201"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aimage-import-controller
    uid: 215f9a73-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams
    verbs:
    - create
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:image-trigger-controller
    namespace: ""
    resourceVersion: "199"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aimage-trigger-controller
    uid: 215c5c41-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    verbs:
    - get
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments
    verbs:
    - get
    - update
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - statefulsets
    verbs:
    - get
    - update
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/instantiate
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/custom
    - builds/docker
    - builds/jenkinspipeline
    - builds/optimizeddocker
    - builds/source
    verbs:
    - create
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:ingress-to-route-controller
    namespace: ""
    resourceVersion: "210"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aingress-to-route-controller
    uid: 21722137-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - ingress
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/custom-host
    verbs:
    - create
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:namespace-security-allocation-controller
    namespace: ""
    resourceVersion: "217"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Anamespace-security-allocation-controller
    uid: 21755162-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - security.openshift.io
    attributeRestrictions: null
    resources:
    - rangeallocations
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:origin-namespace-controller
    namespace: ""
    resourceVersion: "195"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aorigin-namespace-controller
    uid: 21595557-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces/finalize
    - namespaces/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:pv-recycler-controller
    namespace: ""
    resourceVersion: "211"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Apv-recycler-controller
    uid: 2172ae53-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:resourcequota-controller
    namespace: ""
    resourceVersion: "213"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aresourcequota-controller
    uid: 21734d6a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotas
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:sdn-controller
    namespace: ""
    resourceVersion: "202"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Asdn-controller
    uid: 21601dbf-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - hostsubnets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - netnamespaces
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - pods
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:service-ingress-ip-controller
    namespace: ""
    resourceVersion: "209"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aservice-ingress-ip-controller
    uid: 216ed823-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services/status
    verbs:
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:service-serving-cert-controller
    namespace: ""
    resourceVersion: "200"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aservice-serving-cert-controller
    uid: 215e9c3a-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:serviceaccount-controller
    namespace: ""
    resourceVersion: "196"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aserviceaccount-controller
    uid: 2159c9ff-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:serviceaccount-pull-secrets-controller
    namespace: ""
    resourceVersion: "198"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aserviceaccount-pull-secrets-controller
    uid: 215b7779-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - serviceaccounts
    verbs:
    - create
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:template-instance-controller
    namespace: ""
    resourceVersion: "193"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-instance-controller
    uid: 215799e2-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - templateinstances/status
    verbs:
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:controller:template-instance-finalizer-controller
    namespace: ""
    resourceVersion: "194"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-instance-finalizer-controller
    uid: 2158c8e7-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - templateinstances/status
    verbs:
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:template-service-broker
    namespace: ""
    resourceVersion: "215"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-service-broker
    uid: 21744fd7-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authorization.openshift.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - brokertemplateinstances
    verbs:
    - create
    - delete
    - get
    - update
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - brokertemplateinstances/finalizers
    verbs:
    - update
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - templateinstances
    verbs:
    - assign
    - create
    - delete
    - get
  - apiGroups:
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - services
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - get
  - apiGroups:
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:52Z
    name: system:openshift:controller:unidling-controller
    namespace: ""
    resourceVersion: "207"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aunidling-controller
    uid: 216cfb09-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - replicationcontrollers
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - apps
    - extensions
    attributeRestrictions: null
    resources:
    - deployments/scale
    - replicasets/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:discovery
    namespace: ""
    resourceVersion: "153"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Adiscovery
    uid: 214435ca-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /
    - /.well-known
    - /.well-known/*
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /oapi
    - /oapi/*
    - /openapi/v2
    - /osapi
    - /osapi/
    - /swagger-2.0.0.pb-v1
    - /swagger.json
    - /swaggerapi
    - /swaggerapi/*
    - /version
    - /version/*
    resources: []
    verbs:
    - get
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:openshift:templateservicebroker-client
    namespace: ""
    resourceVersion: "163"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aopenshift%3Atemplateservicebroker-client
    uid: 214718f9-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups: null
    attributeRestrictions: null
    nonResourceURLs:
    - /brokers/template.openshift.io/*
    resources: []
    verbs:
    - delete
    - get
    - put
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:persistent-volume-provisioner
    namespace: ""
    resourceVersion: "241"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Apersistent-volume-provisioner
    uid: 213903d0-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:registry
    namespace: ""
    resourceVersion: "140"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aregistry
    uid: 21400dc5-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - imagestreams
    - limitranges
    - resourcequotas
    verbs:
    - list
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagestreamtags
    verbs:
    - delete
    - get
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreams/layers
    - imagestreams/secrets
    verbs:
    - get
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - images
    - imagestreams
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreammappings
    verbs:
    - create
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:replicaset-controller
    namespace: ""
    resourceVersion: "169"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Areplicaset-controller
    uid: 2149b64d-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:replication-controller
    namespace: ""
    resourceVersion: "165"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Areplication-controller
    uid: 21482037-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:router
    namespace: ""
    resourceVersion: "138"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Arouter
    uid: 213f1987-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - endpoints
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    attributeRestrictions: null
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:scope-impersonation
    namespace: ""
    resourceVersion: "83"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Ascope-impersonation
    uid: 212e48c2-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - authentication.k8s.io
    attributeRestrictions: null
    resources:
    - userextras/scopes.authorization.openshift.io
    verbs:
    - impersonate
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:sdn-manager
    namespace: ""
    resourceVersion: "149"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Asdn-manager
    uid: 2142bcfa-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - hostsubnets
    - netnamespaces
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    verbs:
    - create
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:sdn-reader
    namespace: ""
    resourceVersion: "147"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Asdn-reader
    uid: 2141eb0b-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    attributeRestrictions: null
    resources:
    - clusternetworks
    verbs:
    - get
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:14Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    name: system:service-catalog:aggregate-to-admin
    namespace: ""
    resourceVersion: "4566"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aservice-catalog%3Aaggregate-to-admin
    uid: d62fb8bf-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:14Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    name: system:service-catalog:aggregate-to-edit
    namespace: ""
    resourceVersion: "4567"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aservice-catalog%3Aaggregate-to-edit
    uid: d630ab3e-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - settings.k8s.io
    attributeRestrictions: null
    resources:
    - podpresets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-19T00:50:14Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    name: system:service-catalog:aggregate-to-view
    namespace: ""
    resourceVersion: "4568"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Aservice-catalog%3Aaggregate-to-view
    uid: d631e23e-b1c6-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:statefulset-controller
    namespace: ""
    resourceVersion: "184"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Astatefulset-controller
    uid: 214fa6f6-b1c4-11ea-998f-fa163eb79b57
  rules: []
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: system:volume-scheduler
    namespace: ""
    resourceVersion: "248"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Avolume-scheduler
    uid: 213c51da-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    attributeRestrictions: null
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
- apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      authorization.openshift.io/system-only: "true"
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    name: system:webhook
    namespace: ""
    resourceVersion: "151"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/system%3Awebhook
    uid: 2143a36d-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs/webhooks
    verbs:
    - create
    - get
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-view: "true"
  apiVersion: authorization.openshift.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user who can view but not edit any resources within
        the project. They can not view secrets or membership.
      openshift.io/reconcile-protect: "false"
    creationTimestamp: 2020-06-19T00:30:51Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    name: view
    namespace: ""
    resourceVersion: "4571"
    selfLink: /apis/authorization.openshift.io/v1/clusterroles/view
    uid: 213072c4-b1c4-11ea-998f-fa163eb79b57
  rules:
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    attributeRestrictions: null
    resources:
    - controllerrevisions
    - daemonsets
    - deployments
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    attributeRestrictions: null
    resources:
    - horizontalpodautoscalers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    attributeRestrictions: null
    resources:
    - cronjobs
    - jobs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    attributeRestrictions: null
    resources:
    - daemonsets
    - deployments
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    attributeRestrictions: null
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    attributeRestrictions: null
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    attributeRestrictions: null
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    attributeRestrictions: null
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    attributeRestrictions: null
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    attributeRestrictions: null
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    attributeRestrictions: null
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    attributeRestrictions: null
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    attributeRestrictions: null
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    attributeRestrictions: null
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - servicecatalog.k8s.io
    attributeRestrictions: null
    resources:
    - servicebindings
    - servicebrokers
    - serviceclasses
    - serviceinstances
    - serviceplans
    verbs:
    - get
    - list
    - watch
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""
