apiVersion: v1
items:
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-admin: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: admin
    namespace: ""
    resourceVersion: "120109"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/admin
    uid: 59d47fe7-68d7-444a-8083-0d50d2e192c0
  rules:
  - apiGroups:
    - operators.coreos.com
    resources:
    - subscriptions
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    verbs:
    - delete
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    - operatorgroups
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    - packagemanifests/icon
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - '*'
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    - secrets
    - services/proxy
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - ""
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds
    verbs:
    - get
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - persistentvolumeclaims/status
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - replicasets
    - replicasets/scale
    - replicasets/status
    - statefulsets
    - statefulsets/scale
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - cronjobs/status
    - jobs
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - ingresses
    - ingresses/status
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicasets/status
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    - poddisruptionbudgets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - ingresses/status
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - '*'
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - delete
    - get
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - rolebindingrestrictions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - admin
    - edit
    - view
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:28Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:28Z
    name: aggregate-olm-edit
    namespace: ""
    resourceVersion: "1193"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/aggregate-olm-edit
    uid: 8d5740dd-5547-4072-82d9-5fa171483381
  rules:
  - apiGroups:
    - operators.coreos.com
    resources:
    - subscriptions
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    verbs:
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:28Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:28Z
    name: aggregate-olm-view
    namespace: ""
    resourceVersion: "1213"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/aggregate-olm-view
    uid: 080c99a2-b2d4-45ed-a5b0-4f70133fc2eb
  rules:
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    - operatorgroups
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    - packagemanifests/icon
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:24:55Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:24:55Z
    name: alertmanager-main
    namespace: ""
    resourceVersion: "18852"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/alertmanager-main
    uid: dc271b8f-e5c4-4f65-84e4-1ecaea858c6f
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that can get basic information about projects.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: basic-user
    namespace: ""
    resourceVersion: "8325"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/basic-user
    uid: faa262ef-5950-4bf2-ba05-0aafefd9246d
  rules:
  - apiGroups:
    - ""
    - user.openshift.io
    resourceNames:
    - "~"
    resources:
    - users
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projectrequests
    verbs:
    - list
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - clusterroles
    verbs:
    - get
    - list
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - selfsubjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - selfsubjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T12:02:16Z
    labels:
      olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6a6a5490-9236-4a69-9e40-0ca1fb113792"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: checlusters.org.eclipse.che-v1-admin
    namespace: ""
    ownerReferences:
    - apiVersion: apiextensions.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: CustomResourceDefinition
      name: checlusters.org.eclipse.che
      uid: 6a6a5490-9236-4a69-9e40-0ca1fb113792
    resourceVersion: "120088"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/checlusters.org.eclipse.che-v1-admin
    uid: ff12eafc-0325-42fd-a53f-f2ce14896b63
  rules:
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T12:02:16Z
    labels:
      olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-view: "true"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-view: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6a6a5490-9236-4a69-9e40-0ca1fb113792"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: checlusters.org.eclipse.che-v1-crdview
    namespace: ""
    ownerReferences:
    - apiVersion: apiextensions.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: CustomResourceDefinition
      name: checlusters.org.eclipse.che
      uid: 6a6a5490-9236-4a69-9e40-0ca1fb113792
    resourceVersion: "120101"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/checlusters.org.eclipse.che-v1-crdview
    uid: 44fcce5a-399c-4e2e-b22c-8114db680b78
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T12:02:16Z
    labels:
      olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-edit: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-edit: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6a6a5490-9236-4a69-9e40-0ca1fb113792"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: checlusters.org.eclipse.che-v1-edit
    namespace: ""
    ownerReferences:
    - apiVersion: apiextensions.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: CustomResourceDefinition
      name: checlusters.org.eclipse.che
      uid: 6a6a5490-9236-4a69-9e40-0ca1fb113792
    resourceVersion: "120094"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/checlusters.org.eclipse.che-v1-edit
    uid: 6e4a7f87-ab2e-48cc-8e7d-2aa9216c956d
  rules:
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T12:02:16Z
    labels:
      olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-view: "true"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-view: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6a6a5490-9236-4a69-9e40-0ca1fb113792"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: checlusters.org.eclipse.che-v1-view
    namespace: ""
    ownerReferences:
    - apiVersion: apiextensions.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: CustomResourceDefinition
      name: checlusters.org.eclipse.che
      uid: 6a6a5490-9236-4a69-9e40-0ca1fb113792
    resourceVersion: "120096"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/checlusters.org.eclipse.che-v1-view
    uid: 42f0f29f-5370-4de0-804d-323316199c94
  rules:
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: cloud-credential-operator-role
    namespace: ""
    resourceVersion: "871"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cloud-credential-operator-role
    uid: 75abae1b-c483-49ef-87d9-04074e3a84a5
  rules:
  - apiGroups:
    - cloudcredential.openshift.io
    resources:
    - credentialsrequests
    - credentialsrequests/status
    - credentialsrequests/finalizers
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - secrets
    - configmaps
    - events
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusterversions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - dnses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - list
    - watch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: cluster-admin
    namespace: ""
    resourceVersion: "95"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-admin
    uid: 1b84f4e2-a564-490b-a52b-0093d129e2c8
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - '*'
  - nonResourceURLs:
    - '*'
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:26Z
    labels:
      k8s-addon: cluster-autoscaler.addons.k8s.io
      k8s-app: cluster-autoscaler
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:k8s-addon: {}
            f:k8s-app: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:26Z
    name: cluster-autoscaler
    namespace: ""
    resourceVersion: "1063"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-autoscaler
    uid: 5e4bf501-916f-47c0-9b46-50e06b32ec33
  rules:
  - apiGroups:
    - ""
    resources:
    - events
    - endpoints
    verbs:
    - create
    - patch
  - apiGroups:
    - ""
    resources:
    - pods/eviction
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - pods/status
    verbs:
    - update
  - apiGroups:
    - ""
    resourceNames:
    - cluster-autoscaler
    resources:
    - endpoints
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - watch
    - list
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    - services
    - replicationcontrollers
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - batch
    resources:
    - jobs
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - extensions
    resources:
    - replicasets
    - daemonsets
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - watch
    - list
  - apiGroups:
    - apps
    resources:
    - statefulsets
    - replicasets
    - daemonsets
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    - csinodes
    verbs:
    - watch
    - list
    - get
  - apiGroups:
    - cluster.k8s.io
    - machine.openshift.io
    resources:
    - machinedeployments
    - machines
    - machinesets
    verbs:
    - watch
    - list
    - get
    - update
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - create
  - apiGroups:
    - coordination.k8s.io
    resourceNames:
    - cluster-autoscaler
    resources:
    - leases
    verbs:
    - get
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: cluster-autoscaler-operator
    namespace: ""
    resourceVersion: "873"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-autoscaler-operator
    uid: 41a2a18c-30c5-4a4f-9256-1eb861aacc6b
  rules:
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - validatingwebhookconfigurations
    verbs:
    - '*'
  - apiGroups:
    - autoscaling.openshift.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:22:09Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:22:09Z
    name: cluster-autoscaler-operator:cluster-reader
    namespace: ""
    resourceVersion: "16413"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-autoscaler-operator%3Acluster-reader
    uid: 6c988b5a-ef98-44f2-ad00-8360b1d1ea5a
  rules:
  - apiGroups:
    - autoscaling.openshift.io
    resources:
    - '*'
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: cluster-debugger
    namespace: ""
    resourceVersion: "8308"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-debugger
    uid: a362f7cb-a9b8-46ec-a141-e6866c181309
  rules:
  - nonResourceURLs:
    - /debug/pprof
    - /debug/pprof/*
    - /metrics
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:48Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:48Z
    name: cluster-image-registry-operator
    namespace: ""
    resourceVersion: "1730"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-image-registry-operator
    uid: 3cdeeb0c-fff4-45f1-bded-ad4842f1656e
  rules:
  - apiGroups:
    - imageregistry.operator.openshift.io
    resources:
    - configs
    - configs/status
    - imagepruners
    - imagepruners/status
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - images
    - images/status
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - events
    - namespaces
    - persistentvolumeclaims
    - pods
    - secrets
    - services
    verbs:
    - '*'
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - '*'
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deploymentconfigs
    - deployments
    - replicasets
    - statefulsets
    verbs:
    - '*'
  - apiGroups:
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - '*'
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    - clusterrolebindings
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - limitranges
    - resourcequotas
    verbs:
    - list
  - apiGroups:
    - image.openshift.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    - routes/custom-host
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - config.openshift.io
    resources:
    - proxies
    verbs:
    - list
    - get
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:20Z
    name: cluster-monitoring-operator
    namespace: ""
    resourceVersion: "770"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-monitoring-operator
    uid: a7f1b09b-572e-4789-8e49-363c2ac8f9a7
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - configmaps
    - serviceaccounts
    - services
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deployments
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - security.openshift.io
    resources:
    - securitycontextconstraints
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apiregistration.k8s.io
    resources:
    - apiservices
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusterversions
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - proxies
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - podmonitors
    - prometheusrules
    - servicemonitors
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - prometheusrules
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - prometheusrules
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deployments
    - replicasets
    - statefulsets
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - deployments
    - ingresses
    - replicasets
    verbs:
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    - volumeattachments
    verbs:
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - limitranges
    - namespaces
    - nodes
    - persistentvolumeclaims
    - persistentvolumes
    - pods
    - replicationcontrollers
    - resourcequotas
    - secrets
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - node-exporter
    resources:
    - securitycontextconstraints
    verbs:
    - use
  - apiGroups:
    - user.openshift.io
    resources:
    - groups
    verbs:
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - buildconfigs
    - builds
    verbs:
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - list
    - watch
  - apiGroups:
    - quota.openshift.io
    resources:
    - clusterresourcequotas
    verbs:
    - list
    - watch
  - apiGroups:
    - metrics.k8s.io
    resources:
    - nodes
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - metrics.k8s.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - namespaces
    - nodes
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    verbs:
    - get
  - nonResourceURLs:
    - /metrics
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - endpoints
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - alertmanagers.monitoring.coreos.com
    - podmonitors.monitoring.coreos.com
    - prometheuses.monitoring.coreos.com
    - prometheusrules.monitoring.coreos.com
    - servicemonitors.monitoring.coreos.com
    - thanosrulers.monitoring.coreos.com
    resources:
    - customresourcedefinitions
    verbs:
    - get
    - update
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - configmaps
    - secrets
    verbs:
    - '*'
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - alertmanagers
    - alertmanagers/finalizers
    - podmonitors
    - prometheuses
    - prometheuses/finalizers
    - prometheusrules
    - servicemonitors
    - thanosrulers
    - thanosrulers/finalizers
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    - services/finalizers
    verbs:
    - create
    - delete
    - get
    - update
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - alertmanagers
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:12Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:11Z
    name: cluster-monitoring-view
    namespace: ""
    resourceVersion: "12219"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-monitoring-view
    uid: 87da15a3-8667-47a8-8063-41fe3ad57798
  rules:
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: cluster-node-tuning-operator
    namespace: ""
    resourceVersion: "885"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-node-tuning-operator
    uid: ded1d5d2-41d3-4fe9-b84f-4dd5a57f9c40
  rules:
  - apiGroups:
    - tuned.openshift.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - apps
    resources:
    - daemonsets
    verbs:
    - create
    - get
    - delete
    - list
    - update
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    - clusterrolebindings
    verbs:
    - create
    - get
    - delete
    - list
    - update
    - watch
  - apiGroups:
    - security.openshift.io
    resources:
    - securitycontextconstraints
    verbs:
    - use
  - apiGroups:
    - ""
    resources:
    - configmaps
    - namespaces
    - secrets
    - serviceaccounts
    - services
    verbs:
    - create
    - get
    - delete
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    - nodes/specs
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators/status
    verbs:
    - update
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - machineconfigs
    verbs:
    - create
    - get
    - delete
    - list
    - update
    - watch
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - machineconfigpools
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:24Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:24Z
    name: cluster-node-tuning:tuned
    namespace: ""
    resourceVersion: "978"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-node-tuning%3Atuned
    uid: 52ec1cc6-0db2-400f-be43-185012a5c190
  rules:
  - apiGroups:
    - tuned.openshift.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - privileged
    resources:
    - securitycontextconstraints
    verbs:
    - use
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-view: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: cluster-reader
    namespace: ""
    resourceVersion: "120105"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-reader
    uid: b475ca18-0483-48cb-a6d6-4d3ce1150075
  rules:
  - apiGroups:
    - autoscaling.openshift.io
    resources:
    - '*'
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - machine.openshift.io
    resources:
    - machinehealthchecks
    - machines
    - machinesets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - operatorhubs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - componentstatuses
    - nodes
    - nodes/status
    - persistentvolumeclaims/status
    - persistentvolumes
    - persistentvolumes/status
    - pods/binding
    - pods/eviction
    - podtemplates
    - securitycontextconstraints
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets/status
    - deployments/status
    - replicasets/status
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    - customresourcedefinitions/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiregistration.k8s.io
    resources:
    - apiservices
    - apiservices/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs/status
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets/status
    - deployments/status
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    - ingresses/status
    - jobs
    - jobs/status
    - podsecuritypolicies
    - replicasets/status
    - replicationcontrollers
    - storageclasses
    - thirdpartyresources
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - events.k8s.io
    resources:
    - events
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - node.k8s.io
    resources:
    - runtimeclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets/status
    - podsecuritypolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - settings.k8s.io
    resources:
    - podpresets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - csidrivers
    - csinodes
    - storageclasses
    - volumeattachments
    - volumeattachments/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - scheduling.k8s.io
    resources:
    - priorityclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindingrestrictions
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    - imagesignatures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - oauth.openshift.io
    resources:
    - oauthclientauthorizations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projectrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - clusterresourcequotas
    - clusterresourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - securitycontextconstraints
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    resources:
    - rangeallocations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - brokertemplateinstances
    - templateinstances/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - user.openshift.io
    resources:
    - groups
    - identities
    - useridentitymappings
    - users
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - resourceaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - nodes/stats
    verbs:
    - create
    - get
  - nonResourceURLs:
    - '*'
    verbs:
    - get
  - apiGroups:
    - cloudcredential.openshift.io
    resources:
    - credentialsrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - apiservers
    - authentications
    - builds
    - clusteroperators
    - clusterversions
    - consoles
    - dnses
    - featuregates
    - images
    - infrastructures
    - ingresses
    - networks
    - oauths
    - projects
    - proxies
    - schedulers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - samples.operator.openshift.io
    resources:
    - configs
    - configs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - containerruntimeconfigs
    - controllerconfigs
    - kubeletconfigs
    - machineconfigpools
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    - operatorgroups
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    - packagemanifests/icon
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - persistentvolumeclaims/status
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - replicasets
    - replicasets/scale
    - replicasets/status
    - statefulsets
    - statefulsets/scale
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - cronjobs/status
    - jobs
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - ingresses
    - ingresses/status
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicasets/status
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    - poddisruptionbudgets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - ingresses/status
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:38Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:18:38Z
    name: cluster-samples-operator
    namespace: ""
    resourceVersion: "13545"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-samples-operator
    uid: 60c8e914-f8f2-4e16-acda-583b546b2063
  rules:
  - apiGroups:
    - samples.operator.openshift.io
    resources:
    - configs
    - configs/status
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:38Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:18:38Z
    name: cluster-samples-operator-proxy-reader
    namespace: ""
    resourceVersion: "13512"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-samples-operator-proxy-reader
    uid: 20535848-d2e2-43ce-bc97-f5b5acad78f6
  rules:
  - apiGroups:
    - config.openshift.io
    resources:
    - proxies
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that can get basic cluster status information.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: cluster-status
    namespace: ""
    resourceVersion: "8329"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-status
    uid: 2ac65656-6fc6-46ac-9347-57a3d9bb34b0
  rules:
  - nonResourceURLs:
    - /healthz
    - /healthz/
    verbs:
    - get
  - nonResourceURLs:
    - /version
    - /version/*
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /oapi
    - /oapi/*
    - /openapi/v2
    - /swaggerapi
    - /swaggerapi/*
    - /swagger.json
    - /swagger-2.0.0.pb-v1
    - /osapi
    - /osapi/
    - /.well-known
    - /.well-known/*
    - /
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: cluster-storage-operator
    namespace: ""
    resourceVersion: "872"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-storage-operator
    uid: 7b1c494a-ce8a-4ef0-97ef-2c7f32d929e2
  rules:
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - watch
    - list
    - create
    - delete
    - patch
    - update
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    verbs:
    - get
    - list
    - watch
    - create
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators/status
    verbs:
    - update
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T13:35:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: unknown
      operation: Update
      time: 2020-07-01T13:35:20Z
    name: codeready-operator
    namespace: ""
    resourceVersion: "3085612"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/codeready-operator
    uid: cb513085-3ffd-4cc2-a6dc-84c05411a289
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-30T14:37:56Z
    labels:
      olm.owner: codeready-operator-group
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: install-crw-using-crwctl-olm
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:30Z
    name: codeready-operator-group-admin
    namespace: ""
    resourceVersion: "3090288"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/codeready-operator-group-admin
    uid: 9f7b5de0-e764-431e-917d-cbe371ebbf2b
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-30T14:37:56Z
    labels:
      olm.owner: codeready-operator-group
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: install-crw-using-crwctl-olm
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:31Z
    name: codeready-operator-group-edit
    namespace: ""
    resourceVersion: "3090291"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/codeready-operator-group-edit
    uid: 3fb7583d-bf8c-429a-81b5-3268ae6d85c8
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-30T14:37:56Z
    labels:
      olm.owner: codeready-operator-group
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: install-crw-using-crwctl-olm
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:31Z
    name: codeready-operator-group-view
    namespace: ""
    resourceVersion: "3090297"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/codeready-operator-group-view
    uid: cd5ecd10-a529-4a7e-9d6d-b17d47df015b
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:16:57Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:16:57Z
    name: console
    namespace: ""
    resourceVersion: "9161"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/console
    uid: 77c57c1d-584b-4104-9fb2-a24011978d8c
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:16:56Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:16:56Z
    name: console-extensions-reader
    namespace: ""
    resourceVersion: "9153"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/console-extensions-reader
    uid: 9afc8d42-8957-42d8-b33a-eb8eadd7ca09
  rules:
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    - consolenotifications
    - consoleexternalloglinks
    - consoleclidownloads
    - consoleyamlsamples
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:16:57Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:16:57Z
    name: console-operator
    namespace: ""
    resourceVersion: "9157"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/console-operator
    uid: 396aad95-c37d-46a8-85dc-d900cbbf8313
  rules:
  - apiGroups:
    - oauth.openshift.io
    resourceNames:
    - console
    resources:
    - oauthclients
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - ingresses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - proxies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - consoles
    - consoles/status
    - clusteroperators
    - clusteroperators/status
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - delete
  - apiGroups:
    - operator.openshift.io
    resources:
    - consoles
    - consoles/status
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - delete
  - apiGroups:
    - console.openshift.io
    resources:
    - consoleclidownloads
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T11:48:04Z
    labels:
      olm.owner: crwoperator.v2.2.0
      olm.owner.kind: ClusterServiceVersion
      olm.owner.namespace: ndp-crw-oauth
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: catalog
      operation: Update
      time: 2020-07-01T11:48:04Z
    name: crwoperator.v2.2.0-dhh42
    namespace: ""
    resourceVersion: "3048357"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/crwoperator.v2.2.0-dhh42
    uid: ace62735-a271-4185-a445-eebb8d98e1a7
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-26T08:45:42Z
    labels:
      olm.owner: crwoperator.v2.2.0
      olm.owner.kind: ClusterServiceVersion
      olm.owner.namespace: rhopp-crw-staging
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: catalog
      operation: Update
      time: 2020-06-26T08:45:42Z
    name: crwoperator.v2.2.0-jdbk6
    namespace: ""
    resourceVersion: "542379"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/crwoperator.v2.2.0-jdbk6
    uid: ce9b3473-044b-4ed1-90b5-09e6c1a6c655
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-26T08:45:42Z
    labels:
      olm.owner: crwoperator.v2.2.0
      olm.owner.kind: ClusterServiceVersion
      olm.owner.namespace: rhopp-crw-staging
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: catalog
      operation: Update
      time: 2020-06-26T08:45:42Z
    name: crwoperator.v2.2.0-kwvh9
    namespace: ""
    resourceVersion: "542386"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/crwoperator.v2.2.0-kwvh9
    uid: e897c2f3-ab0d-4141-997f-8549e3c6b574
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-26T16:21:37Z
    labels:
      olm.owner: crwoperator.v2.2.0
      olm.owner.kind: ClusterServiceVersion
      olm.owner.namespace: crw-operatorhub-tls-oauth
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: catalog
      operation: Update
      time: 2020-06-26T16:21:37Z
    name: crwoperator.v2.2.0-msx9h
    namespace: ""
    resourceVersion: "737888"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/crwoperator.v2.2.0-msx9h
    uid: 5eaec0c8-aeea-4a61-a585-79a9090ad81c
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T11:38:30Z
    labels:
      olm.owner: crwoperator.v2.2.0
      olm.owner.kind: ClusterServiceVersion
      olm.owner.namespace: ndp-crw
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
        f:rules: {}
      manager: catalog
      operation: Update
      time: 2020-07-01T11:38:30Z
    name: crwoperator.v2.2.0-zvgps
    namespace: ""
    resourceVersion: "3044629"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/crwoperator.v2.2.0-zvgps
    uid: 0b995eab-71b7-448e-82c0-8bd0af5b97b6
  rules:
  - apiGroups:
    - oauth.openshift.io
    resources:
    - oauthclients
    verbs:
    - create
    - get
    - delete
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - oauths
    verbs:
    - get
  - apiGroups:
    - user.openshift.io
    resources:
    - users
    verbs:
    - list
  - apiGroups:
    - console.openshift.io
    resources:
    - consolelinks
    verbs:
    - get
    - list
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:47Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: dns-operator
      operation: Update
      time: 2020-06-25T07:11:47Z
    name: dns-monitoring
    namespace: ""
    resourceVersion: "4356"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/dns-monitoring
    uid: 499f74f8-ad9f-4b52-bd14-d4a7f563519d
  rules:
  - apiGroups:
    - operator.openshift.io
    resources:
    - dnses
    verbs:
    - get
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-edit: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: edit
    namespace: ""
    resourceVersion: "120107"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/edit
    uid: b62e7658-aebb-4075-a268-4ba4815a0c04
  rules:
  - apiGroups:
    - operators.coreos.com
    resources:
    - subscriptions
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    verbs:
    - delete
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    - operatorgroups
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    - packagemanifests/icon
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    - secrets
    - services/proxy
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - ""
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds
    verbs:
    - get
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - persistentvolumeclaims/status
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - replicasets
    - replicasets/scale
    - replicasets/status
    - statefulsets
    - statefulsets/scale
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - cronjobs/status
    - jobs
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - ingresses
    - ingresses/status
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicasets/status
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    - poddisruptionbudgets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - ingresses/status
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: global-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operators
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    name: global-operators-admin
    namespace: ""
    resourceVersion: "5673"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/global-operators-admin
    uid: d7c1c3fc-147d-4d70-ac41-b0cb057666ee
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: global-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operators
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    name: global-operators-edit
    namespace: ""
    resourceVersion: "5676"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/global-operators-edit
    uid: 2169f217-7ce2-420b-a737-505c2e384c87
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: global-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operators
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    name: global-operators-view
    namespace: ""
    resourceVersion: "5679"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/global-operators-view
    uid: 475b7ded-edad-4740-977a-52141637ac8d
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:08Z
    name: grafana
    namespace: ""
    resourceVersion: "12023"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/grafana
    uid: 5cbad92d-e132-47b2-982f-212bb12ddbc2
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:21Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:21Z
    name: insights-operator
    namespace: ""
    resourceVersion: "834"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/insights-operator
    uid: 553c1f9e-5c5a-4f22-b451-617ead7e7652
  rules:
  - apiGroups:
    - config.openshift.io
    resourceNames:
    - insights
    resources:
    - clusteroperators
    verbs:
    - get
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    verbs:
    - create
  - apiGroups:
    - config.openshift.io
    resourceNames:
    - insights
    resources:
    - clusteroperators/status
    verbs:
    - get
    - update
    - patch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: insights-operator-gather
    namespace: ""
    resourceVersion: "894"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/insights-operator-gather
    uid: 75e843e7-bbf2-4bf0-b317-377823252c43
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - list
  - apiGroups:
    - imageregistry.operator.openshift.io
    resources:
    - configs
    - imagepruners
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - proxy
  - apiGroups:
    - ""
    resources:
    - nodes/log
    - nodes/metrics
    - nodes/proxy
    - nodes/stats
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - '*'
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:06:59Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-bootstrap
      operation: Update
      time: 2020-06-25T07:06:59Z
    name: kube-apiserver
    namespace: ""
    resourceVersion: "435"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/kube-apiserver
    uid: e9b304a9-b9f1-4277-88b6-c36d8de42b86
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes/proxy
    verbs:
    - get
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:10Z
    labels:
      app.kubernetes.io/name: kube-state-metrics
      app.kubernetes.io/version: v1.9.5
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/version: {}
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:10Z
    name: kube-state-metrics
    namespace: ""
    resourceVersion: "12111"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/kube-state-metrics
    uid: 885e9a26-8e6b-4b1c-bfed-cdfb9071d927
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    - secrets
    - nodes
    - pods
    - services
    - resourcequotas
    - replicationcontrollers
    - limitranges
    - persistentvolumeclaims
    - persistentvolumes
    - namespaces
    - endpoints
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - deployments
    - replicasets
    - ingresses
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - statefulsets
    - daemonsets
    - deployments
    - replicasets
    verbs:
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    - volumeattachments
    verbs:
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:08:00Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:08:00Z
    name: machine-api-controllers
    namespace: ""
    resourceVersion: "1852"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-api-controllers
    uid: 4a3a7979-bbc4-4d6e-842d-0dffea36c103
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods/eviction
    verbs:
    - create
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - daemonsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - privileged
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:08:00Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:08:00Z
    name: machine-api-operator
    namespace: ""
    resourceVersion: "1856"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-api-operator
    uid: 6403b576-0a95-4370-ba98-143ae5becbcd
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - infrastructures/status
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - featuregates
    - featuregates/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - watch
    - list
    - patch
  - apiGroups:
    - metal3.io
    resources:
    - provisionings
    verbs:
    - get
    - list
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:08:01Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:08:01Z
    name: machine-api-operator:cluster-reader
    namespace: ""
    resourceVersion: "1867"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-api-operator%3Acluster-reader
    uid: c215a397-f5c3-4a54-828a-6fcd7721645d
  rules:
  - apiGroups:
    - machine.openshift.io
    resources:
    - machinehealthchecks
    - machines
    - machinesets
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:19:38Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: machine-config-operator
      operation: Update
      time: 2020-06-25T07:19:38Z
    name: machine-config-controller
    namespace: ""
    resourceVersion: "14810"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-config-controller
    uid: 558965c2-9c4c-4910-a587-26ba30719948
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
    - patch
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - '*'
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - configmaps
    - secrets
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - images
    - clusterversions
    - featuregates
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - schedulers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - operator.openshift.io
    resources:
    - imagecontentsourcepolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - operator.openshift.io
    resources:
    - etcds
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:19:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: machine-config-operator
      operation: Update
      time: 2020-06-25T07:19:20Z
    name: machine-config-daemon
    namespace: ""
    resourceVersion: "14521"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-config-daemon
    uid: 86306db0-16ed-40ac-bb93-67fe38b771ad
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - '*'
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    verbs:
    - get
  - apiGroups:
    - apps
    resources:
    - daemonsets
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - pods/eviction
    verbs:
    - create
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - machineconfigs
    verbs:
    - '*'
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:19:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: machine-config-operator
      operation: Update
      time: 2020-06-25T07:19:20Z
    name: machine-config-daemon-events
    namespace: ""
    resourceVersion: "14523"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-config-daemon-events
    uid: 2638845d-05f5-4242-9e78-48115eb9e1ea
  rules:
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:20:15Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: machine-config-operator
      operation: Update
      time: 2020-06-25T07:20:15Z
    name: machine-config-server
    namespace: ""
    resourceVersion: "15259"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/machine-config-server
    uid: c11dcbbe-d183-42e0-884f-dc94926456f0
  rules:
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - machineconfigs
    - machineconfigpools
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:21Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:21Z
    name: marketplace-operator
    namespace: ""
    resourceVersion: "855"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/marketplace-operator
    uid: 12ee8535-0787-4463-ad7e-9aaf18e86a16
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - operatorhubs
    - operatorhubs/status
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - operators.coreos.com
    resources:
    - catalogsources
    - catalogsourceconfigs
    - operatorsources
    verbs:
    - get
    - create
    - delete
    - update
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - clusteroperators/status
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - secrets
    - services
    - serviceaccounts
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - deployments
    verbs:
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - roles
    - rolebindings
    verbs:
    - list
    - watch
  - apiGroups:
    - operators.coreos.com
    resources:
    - subscriptions
    verbs:
    - get
    - update
    - list
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    verbs:
    - get
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:16Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:16Z
    name: monitoring-edit
    namespace: ""
    resourceVersion: "12449"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/monitoring-edit
    uid: b45b56fc-cdb5-4bbe-9126-ce6953bef989
  rules:
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - servicemonitors
    - podmonitors
    - prometheusrules
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:13Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:13Z
    name: monitoring-rules-edit
    namespace: ""
    resourceVersion: "12305"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/monitoring-rules-edit
    uid: 3bb6344d-0dab-43d8-a54e-969293d9bdec
  rules:
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - prometheusrules
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:15Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:15Z
    name: monitoring-rules-view
    namespace: ""
    resourceVersion: "12400"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/monitoring-rules-view
    uid: be14df4e-1081-4ef7-b398-0d8578c92090
  rules:
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - prometheusrules
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:10:03Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: cluster-network-operator
      operation: Update
      time: 2020-06-25T07:10:03Z
    name: multus
    namespace: ""
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d
    resourceVersion: "2321"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/multus
    uid: 19458da9-69e4-4789-8a77-f06c4fd32a4a
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    - customresourcedefinitions/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - k8s.cni.cncf.io
    resources:
    - '*'
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    - pods/status
    verbs:
    - get
    - list
    - watch
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:10:03Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: cluster-network-operator
      operation: Update
      time: 2020-06-25T07:10:03Z
    name: multus-admission-controller-webhook
    namespace: ""
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d
    resourceVersion: "2337"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/multus-admission-controller-webhook
    uid: a993001a-8510-4fae-88ad-5aa26c5927f2
  rules:
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - validatingwebhookconfigurations
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:13Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:13Z
    name: node-exporter
    namespace: ""
    resourceVersion: "12294"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/node-exporter
    uid: e97b16ce-3826-4233-b129-c492ac5ca55e
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - node-exporter
    resources:
    - securitycontextconstraints
    verbs:
    - use
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-admin: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: olm-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operator-lifecycle-manager
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: olm-operators-admin
    namespace: ""
    resourceVersion: "23552"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/olm-operators-admin
    uid: 772eb363-5482-4e16-840a-ffddf0ed2f5b
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - '*'
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-edit: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: olm-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operator-lifecycle-manager
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: olm-operators-edit
    namespace: ""
    resourceVersion: "23556"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/olm-operators-edit
    uid: c82a5622-d56e-4158-bf82-bdccef93d2ce
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - create
    - update
    - patch
    - delete
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-view: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:12:22Z
    labels:
      olm.owner: olm-operators
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-operator-lifecycle-manager
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:12:22Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: olm-operators-view
    namespace: ""
    resourceVersion: "23561"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/olm-operators-view
    uid: 9ef93996-8455-4a4a-9b2d-8077e5694a81
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-1dece667180a208d-admin: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-ec91e8bc27c81ed7-admin: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-cda6b569020ccb44-admin: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-9d83214931a1a37e-admin: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:35:20Z
    labels:
      olm.owner: openshift-cluster-monitoring
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-monitoring
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:31Z
    name: openshift-cluster-monitoring-admin
    namespace: ""
    resourceVersion: "3090294"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-cluster-monitoring-admin
    uid: 74c9ac29-54fb-4206-897d-4eca3224d629
  rules: null
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-1dece667180a208d-edit: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-ec91e8bc27c81ed7-edit: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-cda6b569020ccb44-edit: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-9d83214931a1a37e-edit: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:35:20Z
    labels:
      olm.owner: openshift-cluster-monitoring
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-monitoring
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:31Z
    name: openshift-cluster-monitoring-edit
    namespace: ""
    resourceVersion: "3090299"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-cluster-monitoring-edit
    uid: 56c93aad-34db-415a-a712-569b73b72ecd
  rules: null
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-1dece667180a208d-view: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-ec91e8bc27c81ed7-view: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-cda6b569020ccb44-view: "true"
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-9d83214931a1a37e-view: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:35:20Z
    labels:
      olm.owner: openshift-cluster-monitoring
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: openshift-monitoring
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:31Z
    name: openshift-cluster-monitoring-view
    namespace: ""
    resourceVersion: "3090300"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-cluster-monitoring-view
    uid: de8f225b-7637-4b1f-a646-24b80a78a5f3
  rules: null
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:34Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:34Z
    name: openshift-csi-snapshot-controller-runner
    namespace: ""
    resourceVersion: "1475"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-csi-snapshot-controller-runner
    uid: 47b4b122-818a-4508-a76e-70eda36d9edd
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - list
    - watch
    - create
    - update
    - patch
  - apiGroups:
    - snapshot.storage.k8s.io
    resources:
    - volumesnapshotclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - snapshot.storage.k8s.io
    resources:
    - volumesnapshotcontents
    verbs:
    - create
    - get
    - list
    - watch
    - update
    - delete
  - apiGroups:
    - snapshot.storage.k8s.io
    resources:
    - volumesnapshots
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - snapshot.storage.k8s.io
    resources:
    - volumesnapshots/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:46Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: dns-operator
      operation: Update
      time: 2020-06-25T07:11:46Z
    name: openshift-dns
    namespace: ""
    resourceVersion: "4317"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-dns
    uid: d4a12932-5754-4614-8897-9567a720fcd7
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    - pods
    - namespaces
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:17Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: openshift-dns-operator
    namespace: ""
    resourceVersion: "626"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-dns-operator
    uid: c754e4e1-3e8c-441c-8890-cff2fe795b3c
  rules:
  - apiGroups:
    - operator.openshift.io
    resources:
    - dnses
    verbs:
    - '*'
  - apiGroups:
    - operator.openshift.io
    resources:
    - dnses/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - daemonsets
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - namespaces
    - services
    - serviceaccounts
    - configmaps
    - endpoints
    - pods
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - servicemonitors
    verbs:
    - create
    - update
    - get
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    - clusterrolebindings
    - roles
    - rolebindings
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    verbs:
    - update
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    - networks
    verbs:
    - create
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:17Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: openshift-ingress-operator
    namespace: ""
    resourceVersion: "649"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-ingress-operator
    uid: 3a74974e-7a09-4bdd-b82e-e17032c62cda
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    - namespaces
    - serviceaccounts
    - endpoints
    - services
    - secrets
    - pods
    - events
    verbs:
    - '*'
  - apiGroups:
    - apps
    resources:
    - deployments
    verbs:
    - '*'
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - '*'
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - servicemonitors
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    - clusterrolebindings
    - roles
    - rolebindings
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - operator.openshift.io
    resources:
    - ingresscontrollers
    - ingresscontrollers/status
    verbs:
    - '*'
  - apiGroups:
    - ingress.operator.openshift.io
    resources:
    - dnsrecords
    - dnsrecords/status
    verbs:
    - '*'
  - apiGroups:
    - config.openshift.io
    resources:
    - infrastructures
    - ingresses
    - dnses
    - apiservers
    - networks
    verbs:
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - ingresses
    verbs:
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    verbs:
    - create
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators/status
    verbs:
    - update
  - apiGroups:
    - route.openshift.io
    resources:
    - routers/metrics
    verbs:
    - get
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - update
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - hostnetwork
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: ingress-operator
      operation: Update
      time: 2020-06-25T07:18:10Z
    name: openshift-ingress-router
    namespace: ""
    resourceVersion: "12101"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-ingress-router
    uid: 9e79ccaf-51ea-4bc7-b1f9-a0a3a9124a85
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - namespaces
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - update
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - hostnetwork
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:10:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: cluster-network-operator
      operation: Update
      time: 2020-06-25T07:10:09Z
    name: openshift-sdn
    namespace: ""
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d
    resourceVersion: "2402"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-sdn
    uid: fadd53a2-a156-4ed2-92e0-625bf8a70feb
  rules:
  - apiGroups:
    - network.openshift.io
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    - endpoints
    - services
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
    - patch
  - apiGroups:
    - extensions
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:10:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: cluster-network-operator
      operation: Update
      time: 2020-06-25T07:10:09Z
    name: openshift-sdn-controller
    namespace: ""
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d
    resourceVersion: "2409"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-sdn-controller
    uid: 32f6e917-7117-406b-b632-0219ea1b7a24
  rules:
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - list
    - get
    - watch
  - apiGroups:
    - network.openshift.io
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - get
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:09Z
    name: openshift-state-metrics
    namespace: ""
    resourceVersion: "12107"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/openshift-state-metrics
    uid: 0f751cd6-0c24-4041-a22c-5904ae0002ee
  rules:
  - apiGroups:
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - buildconfigs
    - builds
    verbs:
    - list
    - watch
  - apiGroups:
    - quota.openshift.io
    resources:
    - clusterresourcequotas
    verbs:
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - user.openshift.io
    resources:
    - groups
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-admin: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T11:19:29Z
    labels:
      olm.owner: operatorgroup
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: crw-operatorhub-tls-oauth
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-07-01T13:49:26Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:30Z
    name: operatorgroup-admin
    namespace: ""
    resourceVersion: "3090278"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/operatorgroup-admin
    uid: 85e5bcbf-be24-407e-ab15-852c8f6b74ad
  rules:
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - '*'
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-edit: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T11:19:30Z
    labels:
      olm.owner: operatorgroup
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: crw-operatorhub-tls-oauth
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-07-01T13:49:26Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:30Z
    name: operatorgroup-edit
    namespace: ""
    resourceVersion: "3090282"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/operatorgroup-edit
    uid: dc04789a-030e-444f-b6c2-5545cf5ce1a8
  rules:
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - create
    - update
    - patch
    - delete
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        olm.opgroup.permissions/aggregate-to-88e59d93b69fa367-view: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-07-01T11:19:30Z
    labels:
      olm.owner: operatorgroup
      olm.owner.kind: OperatorGroup
      olm.owner.namespace: crw-operatorhub-tls-oauth
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-07-01T13:49:27Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:labels:
            .: {}
            f:olm.owner: {}
            f:olm.owner.kind: {}
            f:olm.owner.namespace: {}
      manager: olm
      operation: Update
      time: 2020-07-01T13:49:30Z
    name: operatorgroup-view
    namespace: ""
    resourceVersion: "3090286"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/operatorgroup-view
    uid: 5bbcee60-dac2-4c1e-ac74-4d99c4aafed7
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:23Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:23Z
    name: operatorhub-config-reader
    namespace: ""
    resourceVersion: "902"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/operatorhub-config-reader
    uid: dacd1034-fa32-4e74-a6d3-750219e0e81d
  rules:
  - apiGroups:
    - config.openshift.io
    resources:
    - operatorhubs
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:32:50Z
    labels:
      olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a196d933-1989-4925-bf5f-76a6a5c39587"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: packagemanifests-v1-admin
    namespace: ""
    ownerReferences:
    - apiVersion: apiregistration.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: APIService
      name: v1.packages.operators.coreos.com
      uid: a196d933-1989-4925-bf5f-76a6a5c39587
    resourceVersion: "23551"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/packagemanifests-v1-admin
    uid: dd92f3ba-1691-4332-b3c3-77413910ed54
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:32:50Z
    labels:
      olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-edit: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-edit: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a196d933-1989-4925-bf5f-76a6a5c39587"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: packagemanifests-v1-edit
    namespace: ""
    ownerReferences:
    - apiVersion: apiregistration.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: APIService
      name: v1.packages.operators.coreos.com
      uid: a196d933-1989-4925-bf5f-76a6a5c39587
    resourceVersion: "23555"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/packagemanifests-v1-edit
    uid: 2f2c4ca3-79bc-4605-964e-8aba9b1560f3
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - create
    - update
    - patch
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:32:50Z
    labels:
      olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-view: "true"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:olm.opgroup.permissions/aggregate-to-4bca9f23e412d79d-view: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a196d933-1989-4925-bf5f-76a6a5c39587"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: olm
      operation: Update
      time: 2020-06-25T07:32:50Z
    name: packagemanifests-v1-view
    namespace: ""
    ownerReferences:
    - apiVersion: apiregistration.k8s.io/v1
      blockOwnerDeletion: false
      controller: false
      kind: APIService
      name: v1.packages.operators.coreos.com
      uid: a196d933-1989-4925-bf5f-76a6a5c39587
    resourceVersion: "23560"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/packagemanifests-v1-view
    uid: dc817b8d-7a81-4bd4-9fa1-f8ee3459f555
  rules:
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:08Z
    name: prometheus-adapter
    namespace: ""
    resourceVersion: "12021"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/prometheus-adapter
    uid: 0447eead-58db-4c17-9991-6ab45d1a48dd
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    - namespaces
    - pods
    - services
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:25:00Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:25:00Z
    name: prometheus-k8s
    namespace: ""
    resourceVersion: "19040"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/prometheus-k8s
    uid: 8f4474cf-d6a3-41a6-b151-d6afdc766115
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    verbs:
    - get
  - nonResourceURLs:
    - /metrics
    verbs:
    - get
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:10Z
    labels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/name: prometheus-operator
      app.kubernetes.io/version: v0.38.1
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/version: {}
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:09Z
    name: prometheus-operator
    namespace: ""
    resourceVersion: "12092"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/prometheus-operator
    uid: 145f451d-710d-48f6-aa76-e50ebe5d8561
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    verbs:
    - create
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - alertmanagers.monitoring.coreos.com
    - podmonitors.monitoring.coreos.com
    - prometheuses.monitoring.coreos.com
    - prometheusrules.monitoring.coreos.com
    - servicemonitors.monitoring.coreos.com
    - thanosrulers.monitoring.coreos.com
    resources:
    - customresourcedefinitions
    verbs:
    - get
    - update
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - alertmanagers
    - alertmanagers/finalizers
    - prometheuses
    - prometheuses/finalizers
    - thanosrulers
    - thanosrulers/finalizers
    - servicemonitors
    - podmonitors
    - prometheusrules
    verbs:
    - '*'
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - configmaps
    - secrets
    verbs:
    - '*'
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - list
    - delete
  - apiGroups:
    - ""
    resources:
    - services
    - services/finalizers
    - endpoints
    verbs:
    - get
    - create
    - update
    - delete
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: registry-admin
    namespace: ""
    resourceVersion: "8349"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/registry-admin
    uid: 0dc3eb6f-bbb0-4955-92cd-1830012533d7
  rules:
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - delete
    - get
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: registry-editor
    namespace: ""
    resourceVersion: "8350"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/registry-editor
    uid: a6b20d48-50cf-497d-9af2-ac2b0197867b
  rules:
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:17Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: registry-monitoring
    namespace: ""
    resourceVersion: "674"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/registry-monitoring
    uid: c093c2ab-107a-4049-8177-94828da6b06e
  rules:
  - apiGroups:
    - image.openshift.io
    resources:
    - registry/metrics
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: registry-viewer
    namespace: ""
    resourceVersion: "8352"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/registry-viewer
    uid: 0dbd0a8a-32a5-4466-9adc-fd048cc3fea9
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:09Z
    name: resource-metrics-server-resources
    namespace: ""
    resourceVersion: "12061"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/resource-metrics-server-resources
    uid: 0d576793-5e5d-4609-80bb-d73d9df6021a
  rules:
  - apiGroups:
    - metrics.k8s.io
    resources:
    - '*'
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:12Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: ingress-operator
      operation: Update
      time: 2020-06-25T07:18:12Z
    name: router-monitoring
    namespace: ""
    resourceVersion: "12245"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/router-monitoring
    uid: 0fb3a0ab-8a85-4abb-9163-912466794e8e
  rules:
  - apiGroups:
    - route.openshift.io
    resources:
    - routers/metrics
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: self-access-reviewer
    namespace: ""
    resourceVersion: "8327"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/self-access-reviewer
    uid: 5f08610c-9de3-49bd-94e3-120d31d469a7
  rules:
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - selfsubjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - selfsubjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: A user that can request projects.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: self-provisioner
    namespace: ""
    resourceVersion: "8328"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/self-provisioner
    uid: 68fa568b-55aa-47c3-bb60-cf7ba9db4e0b
  rules:
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projectrequests
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: storage-admin
    namespace: ""
    resourceVersion: "8314"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/storage-admin
    uid: 60500c1e-40bb-442a-ae38-a247d8f8b055
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: sudoer
    namespace: ""
    resourceVersion: "8302"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/sudoer
    uid: 3ac78f8a-df5f-44ab-b927-998e3b48a242
  rules:
  - apiGroups:
    - ""
    - user.openshift.io
    resourceNames:
    - system:admin
    resources:
    - systemusers
    - users
    verbs:
    - impersonate
  - apiGroups:
    - ""
    - user.openshift.io
    resourceNames:
    - system:masters
    resources:
    - groups
    - systemgroups
    verbs:
    - impersonate
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:aggregate-to-admin
    namespace: ""
    resourceVersion: "103"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aaggregate-to-admin
    uid: 47719a2c-1a68-4adc-a701-f50ecdcdbd40
  rules:
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:aggregate-to-edit
    namespace: ""
    resourceVersion: "104"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aaggregate-to-edit
    uid: 8d8686f1-54f7-48df-9c7f-b85aaa106483
  rules:
  - apiGroups:
    - ""
    resources:
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    - secrets
    - services/proxy
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - impersonate
  - apiGroups:
    - ""
    resources:
    - pods
    - pods/attach
    - pods/exec
    - pods/portforward
    - pods/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - replicationcontrollers
    - replicationcontrollers/scale
    - secrets
    - serviceaccounts
    - services
    - services/proxy
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - apps
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - replicasets
    - replicasets/scale
    - statefulsets
    - statefulsets/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - jobs
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - deployments
    - deployments/rollback
    - deployments/scale
    - ingresses
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicationcontrollers/scale
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:aggregate-to-view
    namespace: ""
    resourceVersion: "105"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aaggregate-to-view
    uid: 92f68d50-d188-46e3-9196-f35efa4a910d
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - persistentvolumeclaims/status
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - replicasets
    - replicasets/scale
    - replicasets/status
    - statefulsets
    - statefulsets/scale
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - cronjobs/status
    - jobs
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - ingresses
    - ingresses/status
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicasets/status
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    - poddisruptionbudgets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - ingresses/status
    - networkpolicies
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:11Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:10Z
    name: system:aggregated-metrics-reader
    namespace: ""
    resourceVersion: "12141"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aaggregated-metrics-reader
    uid: 3e7ac41a-4af3-4d1a-a057-4f221c92bdf9
  rules:
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    - nodes
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:auth-delegator
    namespace: ""
    resourceVersion: "111"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aauth-delegator
    uid: 73f6494d-b8f0-43a7-931b-0446ce350f83
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:basic-user
    namespace: ""
    resourceVersion: "98"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Abasic-user
    uid: 3aaf0d2e-8688-45dd-9226-d999797b09e0
  rules:
  - apiGroups:
    - authorization.k8s.io
    resources:
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:build-strategy-custom
    namespace: ""
    resourceVersion: "8311"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Abuild-strategy-custom
    uid: be77ed44-ce8c-4948-9362-51e3770f72f9
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/custom
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:build-strategy-docker
    namespace: ""
    resourceVersion: "8310"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Abuild-strategy-docker
    uid: 5b67054c-2e95-4763-ba18-2ff46d5ca12d
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/docker
    - builds/optimizeddocker
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:build-strategy-jenkinspipeline
    namespace: ""
    resourceVersion: "8313"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Abuild-strategy-jenkinspipeline
    uid: 3cbfc810-7fe2-4309-9b6e-fcb4eb5bd34f
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/jenkinspipeline
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:build-strategy-source
    namespace: ""
    resourceVersion: "8312"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Abuild-strategy-source
    uid: 414556f0-f15a-448d-946a-202c6b8a27ce
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/source
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
    namespace: ""
    resourceVersion: "116"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Acertificatesigningrequests%3Anodeclient
    uid: 21bc31c8-0b1b-4f83-8f7b-1ac9f29a7497
  rules:
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests/nodeclient
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:certificatesigningrequests:selfnodeclient
    namespace: ""
    resourceVersion: "117"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Acertificatesigningrequests%3Aselfnodeclient
    uid: 1e05cf7f-8d0e-442d-8154-6c5cc7170423
  rules:
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests/selfnodeclient
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:kube-apiserver-client-approver
    namespace: ""
    resourceVersion: "121"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Akube-apiserver-client-approver
    uid: 9c25cc83-814e-4b47-912e-abf535671e00
  rules:
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kube-apiserver-client
    resources:
    - signers
    verbs:
    - approve
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:kube-apiserver-client-kubelet-approver
    namespace: ""
    resourceVersion: "122"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Akube-apiserver-client-kubelet-approver
    uid: 036a9be8-aaa5-4219-b911-a679c5d70e79
  rules:
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kube-apiserver-client-kubelet
    resources:
    - signers
    verbs:
    - approve
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:kubelet-serving-approver
    namespace: ""
    resourceVersion: "120"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Akubelet-serving-approver
    uid: bb32abc0-2372-47e5-931d-79a7d5e4686a
  rules:
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kubelet-serving
    resources:
    - signers
    verbs:
    - approve
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:certificates.k8s.io:legacy-unknown-approver
    namespace: ""
    resourceVersion: "119"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Alegacy-unknown-approver
    uid: 8f02080f-b8b3-48b2-896b-e90d275900ad
  rules:
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/legacy-unknown
    resources:
    - signers
    verbs:
    - approve
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:attachdetach-controller
    namespace: ""
    resourceVersion: "127"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aattachdetach-controller
    uid: c94df156-5ebe-4777-846f-ae9489eec0e9
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - storage.k8s.io
    resources:
    - volumeattachments
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - csidrivers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - csinodes
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:certificate-controller
    namespace: ""
    resourceVersion: "151"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Acertificate-controller
    uid: aab42c84-59eb-41ce-91e9-24b203d7e8d0
  rules:
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - update
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kube-apiserver-client-kubelet
    resources:
    - signers
    verbs:
    - approve
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kube-apiserver-client
    - kubernetes.io/kube-apiserver-client-kubelet
    - kubernetes.io/kubelet-serving
    - kubernetes.io/legacy-unknown
    resources:
    - signers
    verbs:
    - sign
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:clusterrole-aggregation-controller
    namespace: ""
    resourceVersion: "128"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aclusterrole-aggregation-controller
    uid: bba2ad87-030b-4471-b456-625aaf31f157
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterroles
    verbs:
    - escalate
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:cronjob-controller
    namespace: ""
    resourceVersion: "129"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Acronjob-controller
    uid: 2589a089-c84d-4b8a-973c-9f6eefa51622
  rules:
  - apiGroups:
    - batch
    resources:
    - cronjobs
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - batch
    resources:
    - jobs
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs/status
    verbs:
    - update
  - apiGroups:
    - batch
    resources:
    - cronjobs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:daemon-set-controller
    namespace: ""
    resourceVersion: "130"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Adaemon-set-controller
    uid: e57243f0-44e3-4741-b323-15f42d6396ce
  rules:
  - apiGroups:
    - apps
    - extensions
    resources:
    - daemonsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    resources:
    - daemonsets/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - daemonsets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    resources:
    - pods/binding
    verbs:
    - create
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:deployment-controller
    namespace: ""
    resourceVersion: "131"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Adeployment-controller
    uid: b7f97e55-fe61-44fd-a718-66d4cb54c309
  rules:
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments/finalizers
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:disruption-controller
    namespace: ""
    resourceVersion: "132"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Adisruption-controller
    uid: 5722be19-933b-4bc8-b5bb-8516dd748482
  rules:
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets/status
    verbs:
    - update
  - apiGroups:
    - '*'
    resources:
    - '*/scale'
    verbs:
    - get
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:endpoint-controller
    namespace: ""
    resourceVersion: "133"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aendpoint-controller
    uid: db0eb5e0-c912-41ad-a528-26f0da266bb5
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - create
    - delete
    - get
    - list
    - update
  - apiGroups:
    - ""
    resources:
    - endpoints/restricted
    verbs:
    - create
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:endpointslice-controller
    namespace: ""
    resourceVersion: "134"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aendpointslice-controller
    uid: 8da0a518-bf07-4a5c-ac72-52a76904f51f
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    - pods
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - services/finalizers
    verbs:
    - update
  - apiGroups:
    - discovery.k8s.io
    resources:
    - endpointslices
    verbs:
    - create
    - delete
    - get
    - list
    - update
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:expand-controller
    namespace: ""
    resourceVersion: "135"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aexpand-controller
    uid: c1d02ccf-e1ed-42c3-a2ba-50c5077100af
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:generic-garbage-collector
    namespace: ""
    resourceVersion: "136"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Ageneric-garbage-collector
    uid: 149fb284-3c26-431b-8c43-56d0080dd459
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:horizontal-pod-autoscaler
    namespace: ""
    resourceVersion: "137"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Ahorizontal-pod-autoscaler
    uid: 0c2747ac-6e16-4d6e-8d14-335353a15aff
  rules:
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - update
  - apiGroups:
    - '*'
    resources:
    - '*/scale'
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - list
  - apiGroups:
    - ""
    resourceNames:
    - 'http:heapster:'
    - 'https:heapster:'
    resources:
    - services/proxy
    verbs:
    - get
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    verbs:
    - list
  - apiGroups:
    - custom.metrics.k8s.io
    resources:
    - '*'
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:job-controller
    namespace: ""
    resourceVersion: "138"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Ajob-controller
    uid: 10609634-7e4e-4ff8-97b6-c4ac59edff11
  rules:
  - apiGroups:
    - batch
    resources:
    - jobs
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - batch
    resources:
    - jobs/status
    verbs:
    - update
  - apiGroups:
    - batch
    resources:
    - jobs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:namespace-controller
    namespace: ""
    resourceVersion: "139"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Anamespace-controller
    uid: f1c127ce-4352-4b6a-ad61-1d7964110d58
  rules:
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces/finalize
    - namespaces/status
    verbs:
    - update
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - delete
    - deletecollection
    - get
    - list
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:node-controller
    namespace: ""
    resourceVersion: "140"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Anode-controller
    uid: 5ae01790-ef28-438d-a5cd-c6ab602306f0
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - delete
    - get
    - list
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - pods/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - delete
    - list
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:26Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:26Z
    name: system:controller:operator-lifecycle-manager
    namespace: ""
    resourceVersion: "1080"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aoperator-lifecycle-manager
    uid: b13978fe-49d6-45b2-9400-0bad7bc6fdb2
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - '*'
  - nonResourceURLs:
    - '*'
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:persistent-volume-binder
    namespace: ""
    resourceVersion: "141"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Apersistent-volume-binder
    uid: 1cdbf134-48ef-4652-891b-ab10ff6e4169
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumes/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - create
    - delete
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - create
    - delete
    - get
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:pod-garbage-collector
    namespace: ""
    resourceVersion: "142"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Apod-garbage-collector
    uid: d2ae7c3d-66c8-4941-9b8d-60baed5e94b4
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - delete
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:pv-protection-controller
    namespace: ""
    resourceVersion: "153"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Apv-protection-controller
    uid: 3d3f44fe-8b42-4c15-aa69-d216b7160caa
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:pvc-protection-controller
    namespace: ""
    resourceVersion: "152"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Apvc-protection-controller
    uid: bdd8963c-9ef0-45c8-8b24-cd798e061d1d
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:replicaset-controller
    namespace: ""
    resourceVersion: "143"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Areplicaset-controller
    uid: 75c701a7-e085-46d7-80a1-b63bc3379848
  rules:
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets/status
    verbs:
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:replication-controller
    namespace: ""
    resourceVersion: "144"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Areplication-controller
    uid: fb1d4c60-812a-4434-a036-f5c73b437a45
  rules:
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:resourcequota-controller
    namespace: ""
    resourceVersion: "145"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aresourcequota-controller
    uid: 0858f613-14e2-4879-ad1e-30ef772279fc
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:route-controller
    namespace: ""
    resourceVersion: "146"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aroute-controller
    uid: fdf43d20-ae29-409d-adaa-a8a9047a4a59
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:service-account-controller
    namespace: ""
    resourceVersion: "147"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aservice-account-controller
    uid: 7c8c398c-09f1-4b3e-ad35-6a3ab1c968e5
  rules:
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - create
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:service-controller
    namespace: ""
    resourceVersion: "148"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Aservice-controller
    uid: 9c308363-8651-4a78-b989-1ef89d8194e1
  rules:
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - services/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:statefulset-controller
    namespace: ""
    resourceVersion: "149"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Astatefulset-controller
    uid: b2ed5469-3436-4899-bc7f-1ad771eb38fa
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - statefulsets/status
    verbs:
    - update
  - apiGroups:
    - apps
    resources:
    - statefulsets/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - create
    - get
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:controller:ttl-controller
    namespace: ""
    resourceVersion: "150"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acontroller%3Attl-controller
    uid: 7eef7c15-7772-4244-8e08-47e8b8341610
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to deploy within a project.  Used
        primarily with service accounts for automated deployments.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:deployer
    namespace: ""
    resourceVersion: "8340"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Adeployer
    uid: 4892f258-bf9f-4a1f-a1f9-53233f7f0fcf
  rules:
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - delete
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods/log
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - list
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:discovery
    namespace: ""
    resourceVersion: "96"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Adiscovery
    uid: a9ff66ca-3684-4c53-a5ed-821e1f61278d
  rules:
  - nonResourceURLs:
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /healthz
    - /livez
    - /openapi
    - /openapi/*
    - /readyz
    - /version
    - /version/
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:heapster
    namespace: ""
    resourceVersion: "106"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aheapster
    uid: bd729ea9-2248-4ed4-b6f9-47634b0dac4e
  rules:
  - apiGroups:
    - ""
    resources:
    - events
    - namespaces
    - nodes
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - deployments
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-auditor
    namespace: ""
    resourceVersion: "8330"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-auditor
    uid: 13b7b8a4-03b1-4b0d-acf3-9e2672cdd17d
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    verbs:
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to build, push and pull images from
        within a project.  Used primarily with service accounts for builds.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-builder
    namespace: ""
    resourceVersion: "8333"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-builder
    uid: 90781de4-4a0c-4adc-990c-ca417e919b2e
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-pruner
    namespace: ""
    resourceVersion: "8337"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-pruner
    uid: 5223ea2c-e809-4792-a4af-17a6cd6fb37f
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    - replicationcontrollers
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - limitranges
    verbs:
    - list
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - builds
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    resources:
    - daemonsets
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments
    verbs:
    - get
    - list
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    verbs:
    - delete
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    - imagestreams
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to pull images from within a project.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-puller
    namespace: ""
    resourceVersion: "8331"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-puller
    uid: d13dfa0e-125c-4357-9a1e-b39323572bd5
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      openshift.io/description: Grants the right to push and pull images from within
        a project.
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-pusher
    namespace: ""
    resourceVersion: "8332"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-pusher
    uid: 2806cc00-61e3-47fc-9ac7-db7067809683
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:image-signer
    namespace: ""
    resourceVersion: "8339"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aimage-signer
    uid: 29810f2a-3c45-41e2-bd1f-c4ca60c83df4
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagesignatures
    verbs:
    - create
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:kube-aggregator
    namespace: ""
    resourceVersion: "112"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akube-aggregator
    uid: 383c6ad8-96fd-443a-aa74-e2f82a032ef2
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:kube-controller-manager
    namespace: ""
    resourceVersion: "113"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akube-controller-manager
    uid: c2e22831-0b4f-46b3-9292-a1a370d04a9f
  rules:
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - create
  - apiGroups:
    - coordination.k8s.io
    resourceNames:
    - kube-controller-manager
    resources:
    - leases
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - create
  - apiGroups:
    - ""
    resourceNames:
    - kube-controller-manager
    resources:
    - endpoints
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - delete
  - apiGroups:
    - ""
    resources:
    - configmaps
    - namespaces
    - secrets
    - serviceaccounts
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - secrets
    - serviceaccounts
    verbs:
    - update
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - serviceaccounts/token
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:kube-dns
    namespace: ""
    resourceVersion: "114"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akube-dns
    uid: bf73d92e-19fa-4bac-9583-014f77412feb
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    verbs:
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:kube-scheduler
    namespace: ""
    resourceVersion: "124"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akube-scheduler
    uid: 3abc5284-6741-45c9-8ab7-b1bd72b51e0a
  rules:
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - create
  - apiGroups:
    - coordination.k8s.io
    resourceNames:
    - kube-scheduler
    resources:
    - leases
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - create
  - apiGroups:
    - ""
    resourceNames:
    - kube-scheduler
    resources:
    - endpoints
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - pods/binding
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - pods/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    - extensions
    resources:
    - replicasets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - storage.k8s.io
    resources:
    - csinodes
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:kubelet-api-admin
    namespace: ""
    resourceVersion: "109"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akubelet-api-admin
    uid: 5e6f926f-3480-4235-b63b-347a6d82f8e0
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - proxy
  - apiGroups:
    - ""
    resources:
    - nodes/log
    - nodes/metrics
    - nodes/proxy
    - nodes/spec
    - nodes/stats
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:master
    namespace: ""
    resourceVersion: "8341"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Amaster
    uid: 3a3e5ba6-7b68-402a-abeb-f3129aca7a13
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - '*'
  - nonResourceURLs:
    - '*'
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node
    namespace: ""
    resourceVersion: "107"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode
    uid: 63055da2-3a1a-48fd-a98c-9ac2ab1019d9
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
  - apiGroups:
    - ""
    resources:
    - pods/status
    verbs:
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - pods/eviction
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - configmaps
    - secrets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    - persistentvolumes
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - get
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - create
    - get
    - list
    - watch
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - create
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - storage.k8s.io
    resources:
    - volumeattachments
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims/status
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - serviceaccounts/token
    verbs:
    - create
  - apiGroups:
    - storage.k8s.io
    resources:
    - csidrivers
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - csinodes
    verbs:
    - create
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - node.k8s.io
    resources:
    - runtimeclasses
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node-admin
    namespace: ""
    resourceVersion: "125"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode-admin
    uid: e6c433ad-4e0e-48fa-8f92-cc7a318c360f
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - proxy
  - apiGroups:
    - ""
    resources:
    - nodes/log
    - nodes/metrics
    - nodes/proxy
    - nodes/spec
    - nodes/stats
    verbs:
    - '*'
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node-bootstrapper
    namespace: ""
    resourceVersion: "110"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode-bootstrapper
    uid: fca4c8c1-0b26-48d9-b0a1-b1d32d0a2d14
  rules:
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - create
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node-problem-detector
    namespace: ""
    resourceVersion: "108"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode-problem-detector
    uid: 5d980f93-a280-4cf8-86a6-bc0e120d4511
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - nodes/status
    verbs:
    - patch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node-proxier
    namespace: ""
    resourceVersion: "123"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode-proxier
    uid: 3e8a7a46-f96a-4f0c-9bf1-033e9c388dc8
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - discovery.k8s.io
    resources:
    - endpointslices
    verbs:
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:node-reader
    namespace: ""
    resourceVersion: "126"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Anode-reader
    uid: e5744820-3368-4ec1-93d5-6d0ace3c02aa
  rules:
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - nodes/stats
    verbs:
    - create
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:oauth-token-deleter
    namespace: ""
    resourceVersion: "8342"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aoauth-token-deleter
    uid: 26eaf1f5-66c5-49d5-ac4b-d6e1a42b9509
  rules:
  - apiGroups:
    - ""
    - oauth.openshift.io
    resources:
    - oauthaccesstokens
    - oauthauthorizetokens
    verbs:
    - delete
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-admin: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:openshift:aggregate-to-admin
    namespace: ""
    resourceVersion: "8315"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-admin
    uid: f1d07ef3-fae8-4eb8-91c3-1bde3faf6e5a
  rules:
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - rolebindings
    - roles
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - rolebindingrestrictions
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - admin
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - delete
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - update
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - resourceaccessreviews
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:openshift:aggregate-to-cluster-reader
    namespace: ""
    resourceVersion: "8306"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-cluster-reader
    uid: 4ed922b4-bbe4-4e73-a5f9-e81456bc72b3
  rules:
  - apiGroups:
    - ""
    resources:
    - componentstatuses
    - nodes
    - nodes/status
    - persistentvolumeclaims/status
    - persistentvolumes
    - persistentvolumes/status
    - pods/binding
    - pods/eviction
    - podtemplates
    - securitycontextconstraints
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets/status
    - deployments/status
    - replicasets/status
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    - customresourcedefinitions/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiregistration.k8s.io
    resources:
    - apiservices
    - apiservices/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs/status
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets/status
    - deployments/status
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    - ingresses/status
    - jobs
    - jobs/status
    - podsecuritypolicies
    - replicasets/status
    - replicationcontrollers
    - storageclasses
    - thirdpartyresources
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - events.k8s.io
    resources:
    - events
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - node.k8s.io
    resources:
    - runtimeclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets/status
    - podsecuritypolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - settings.k8s.io
    resources:
    - podpresets
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - csidrivers
    - csinodes
    - storageclasses
    - volumeattachments
    - volumeattachments/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - scheduling.k8s.io
    resources:
    - priorityclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    - certificatesigningrequests/approval
    - certificatesigningrequests/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - clusterrolebindings
    - clusterroles
    - rolebindingrestrictions
    - rolebindings
    - roles
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    - imagesignatures
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    - oauth.openshift.io
    resources:
    - oauthclientauthorizations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projectrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - clusterresourcequotas
    - clusterresourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - clusternetworks
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - securitycontextconstraints
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - security.openshift.io
    resources:
    - rangeallocations
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - brokertemplateinstances
    - templateinstances/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - user.openshift.io
    resources:
    - groups
    - identities
    - useridentitymappings
    - users
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - authorization.openshift.io
    resources:
    - localresourceaccessreviews
    - localsubjectaccessreviews
    - resourceaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    - subjectrulesreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - localsubjectaccessreviews
    - selfsubjectaccessreviews
    - selfsubjectrulesreviews
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - podsecuritypolicyreviews
    - podsecuritypolicyselfsubjectreviews
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - nodes/metrics
    - nodes/spec
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - nodes/stats
    verbs:
    - create
    - get
  - nonResourceURLs:
    - '*'
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:openshift:aggregate-to-edit
    namespace: ""
    resourceVersion: "8318"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-edit
    uid: fdfaaf22-bad0-40eb-a30f-4e9f9a6f5f02
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    - buildconfigs/instantiatebinary
    - builds/clone
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/details
    verbs:
    - update
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - edit
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigrollbacks
    - deploymentconfigs/instantiate
    - deploymentconfigs/rollback
    verbs:
    - create
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreams/secrets
    - imagestreamtags
    - imagetags
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/custom-host
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - extensions
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-view: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-view: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:openshift:aggregate-to-view
    namespace: ""
    resourceVersion: "8321"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Aaggregate-to-view
    uid: e4e37e34-f28e-4460-bf6e-d9849f0753b2
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:17Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: system:openshift:cloud-credential-operator:cluster-reader
    namespace: ""
    resourceVersion: "606"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acloud-credential-operator%3Acluster-reader
    uid: e3d9b88c-1986-408e-b3c3-6f34f6ba9c2f
  rules:
  - apiGroups:
    - cloudcredential.openshift.io
    resources:
    - credentialsrequests
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:26Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:26Z
    name: system:openshift:cluster-config-operator:cluster-reader
    namespace: ""
    resourceVersion: "1077"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acluster-config-operator%3Acluster-reader
    uid: 1603e5bf-7cec-460c-b03b-2574cc47ef1f
  rules:
  - apiGroups:
    - config.openshift.io
    resources:
    - apiservers
    - authentications
    - builds
    - clusteroperators
    - clusterversions
    - consoles
    - dnses
    - featuregates
    - images
    - infrastructures
    - ingresses
    - networks
    - oauths
    - projects
    - proxies
    - schedulers
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:38Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:18:38Z
    name: system:openshift:cluster-samples-operator:cluster-reader
    namespace: ""
    resourceVersion: "13551"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acluster-samples-operator%3Acluster-reader
    uid: 594848d7-24e8-49d1-9a87-c9fc50661b09
  rules:
  - apiGroups:
    - samples.operator.openshift.io
    resources:
    - configs
    - configs/status
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:build-config-change-controller
    namespace: ""
    resourceVersion: "8362"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Abuild-config-change-controller
    uid: 011b2763-5a2e-4e6e-b63e-172bcc3311ea
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds
    verbs:
    - delete
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:build-controller
    namespace: ""
    resourceVersion: "8360"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Abuild-controller
    uid: f381e117-5842-48de-af6c-fddf8de8ec36
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds
    verbs:
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    verbs:
    - get
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/custom
    - builds/docker
    - builds/jenkinspipeline
    - builds/optimizeddocker
    - builds/source
    verbs:
    - create
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - create
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - security.openshift.io
    resources:
    - podsecuritypolicysubjectreviews
    verbs:
    - create
  - apiGroups:
    - config.openshift.io
    resources:
    - builds
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:cluster-quota-reconciliation-controller
    namespace: ""
    resourceVersion: "8376"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Acluster-quota-reconciliation-controller
    uid: 7d273c11-bbae-4bcc-9928-f1621bcb74f2
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - clusterresourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:12Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:12Z
    name: system:openshift:controller:default-rolebindings-controller
    namespace: ""
    resourceVersion: "8387"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adefault-rolebindings-controller
    uid: 004a4f95-51a1-407e-a25f-e7df944eea34
  rules:
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - rolebindings
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - rolebindings
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:deployer-controller
    namespace: ""
    resourceVersion: "8363"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adeployer-controller
    uid: f5564093-b4fe-45b3-8b03-04eda7cc03b2
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - delete
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:deploymentconfig-controller
    namespace: ""
    resourceVersion: "8366"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Adeploymentconfig-controller
    uid: e71a3e06-61b0-400f-960d-d7a083bef459
  rules:
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/status
    verbs:
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:12Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:12Z
    name: system:openshift:controller:horizontal-pod-autoscaler
    namespace: ""
    resourceVersion: "8385"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Ahorizontal-pod-autoscaler
    uid: bd534324-d6eb-4ea5-b57d-1b33b3952d1f
  rules:
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/scale
    verbs:
    - get
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:image-import-controller
    namespace: ""
    resourceVersion: "8375"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aimage-import-controller
    uid: da7f8f35-c827-44e9-a39d-0d45ab34ed18
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - create
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - images
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimports
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:image-trigger-controller
    namespace: ""
    resourceVersion: "8373"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aimage-trigger-controller
    uid: bd16a973-4329-47b6-846c-eccd83afe53f
  rules:
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    verbs:
    - get
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments
    verbs:
    - get
    - update
  - apiGroups:
    - apps
    resources:
    - statefulsets
    verbs:
    - get
    - update
  - apiGroups:
    - batch
    resources:
    - cronjobs
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/instantiate
    verbs:
    - create
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/custom
    - builds/docker
    - builds/jenkinspipeline
    - builds/optimizeddocker
    - builds/source
    verbs:
    - create
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:ingress-to-route-controller
    namespace: ""
    resourceVersion: "8382"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aingress-to-route-controller
    uid: 1748daa3-260b-4c24-b220-0ed4542929ab
  rules:
  - apiGroups:
    - ""
    resources:
    - secrets
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - ingress
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - route.openshift.io
    resources:
    - routes/custom-host
    verbs:
    - create
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:28Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:28Z
    name: system:openshift:controller:machine-approver
    namespace: ""
    resourceVersion: "1210"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Amachine-approver
    uid: 764da4eb-a0eb-499b-aec8-fd88825d6274
  rules:
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - certificates.k8s.io
    resources:
    - certificatesigningrequests/approval
    verbs:
    - update
  - apiGroups:
    - certificates.k8s.io
    resourceNames:
    - kubernetes.io/kube-apiserver-client-kubelet
    - kubernetes.io/kubelet-serving
    resources:
    - signers
    verbs:
    - approve
  - apiGroups:
    - machine.openshift.io
    resources:
    - machines
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - config.openshift.io
    resources:
    - clusteroperators
    verbs:
    - get
    - create
    - list
    - watch
  - apiGroups:
    - config.openshift.io
    resourceNames:
    - machine-approver
    resources:
    - clusteroperators/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:11:33Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-kube-controller-manager-operator
      operation: Update
      time: 2020-06-25T07:11:33Z
    name: system:openshift:controller:namespace-security-allocation-controller
    namespace: ""
    resourceVersion: "3575"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Anamespace-security-allocation-controller
    uid: da8decb5-5da2-4755-8fd9-4db62a8fe583
  rules:
  - apiGroups:
    - security.openshift.io
    resources:
    - rangeallocations
    verbs:
    - create
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - update
    - watch
    - patch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:origin-namespace-controller
    namespace: ""
    resourceVersion: "8370"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aorigin-namespace-controller
    uid: 72ca5b6f-15f7-4185-8948-645d4894c0ed
  rules:
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces/finalize
    - namespaces/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:pv-recycler-controller
    namespace: ""
    resourceVersion: "8383"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Apv-recycler-controller
    uid: 1057ce07-06d7-48e0-a94a-373395840a7a
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumes/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:resourcequota-controller
    namespace: ""
    resourceVersion: "8384"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aresourcequota-controller
    uid: b313c8fb-eaad-4616-aa83-f39f12db1ae9
  rules:
  - apiGroups:
    - ""
    resources:
    - resourcequotas/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - resourcequotas
    verbs:
    - list
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - list
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - list
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - list
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - list
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:31Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: service-ca-operator
      operation: Update
      time: 2020-06-25T07:11:31Z
    name: system:openshift:controller:service-ca
    namespace: ""
    resourceVersion: "3501"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aservice-ca
    uid: 93e37155-7332-456f-94e2-8413133c8e72
  rules:
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - get
    - list
    - watch
    - update
    - patch
  - apiGroups:
    - admissionregistration.k8s.io
    resources:
    - mutatingwebhookconfigurations
    - validatingwebhookconfigurations
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - apiextensions.k8s.io
    resources:
    - customresourcedefinitions
    verbs:
    - get
    - list
    - watch
    - update
  - apiGroups:
    - apiregistration.k8s.io
    resources:
    - apiservices
    verbs:
    - get
    - list
    - watch
    - update
    - patch
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - get
    - list
    - watch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:service-ingress-ip-controller
    namespace: ""
    resourceVersion: "8380"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aservice-ingress-ip-controller
    uid: f50441da-d3cf-4f41-95b2-b38cf3e6dda5
  rules:
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - services/status
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:service-serving-cert-controller
    namespace: ""
    resourceVersion: "8374"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aservice-serving-cert-controller
    uid: 22dcd28f-1df2-4fc5-899d-6e4cb7a46d63
  rules:
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:serviceaccount-controller
    namespace: ""
    resourceVersion: "8371"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aserviceaccount-controller
    uid: e65b9582-378c-4286-beac-0145eed5f740
  rules:
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:serviceaccount-pull-secrets-controller
    namespace: ""
    resourceVersion: "8372"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aserviceaccount-pull-secrets-controller
    uid: 0aab1566-4665-4dd4-84d2-fa6fe87eb8e8
  rules:
  - apiGroups:
    - ""
    resources:
    - serviceaccounts
    verbs:
    - create
    - get
    - list
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:template-instance-controller
    namespace: ""
    resourceVersion: "8367"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-instance-controller
    uid: 7b73b3b6-97f6-401d-86b0-f47e6c6e0ee7
  rules:
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - template.openshift.io
    resources:
    - templateinstances/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:template-instance-finalizer-controller
    namespace: ""
    resourceVersion: "8369"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-instance-finalizer-controller
    uid: a9c8135e-b25f-4527-93bb-7a110c65b597
  rules:
  - apiGroups:
    - template.openshift.io
    resources:
    - templateinstances/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:12Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:12Z
    name: system:openshift:controller:template-service-broker
    namespace: ""
    resourceVersion: "8386"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Atemplate-service-broker
    uid: caa7d7eb-71d5-4647-b62f-cd3eb7d82d59
  rules:
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authorization.openshift.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - template.openshift.io
    resources:
    - brokertemplateinstances
    verbs:
    - create
    - delete
    - get
    - update
  - apiGroups:
    - template.openshift.io
    resources:
    - brokertemplateinstances/finalizers
    verbs:
    - update
  - apiGroups:
    - template.openshift.io
    resources:
    - templateinstances
    verbs:
    - assign
    - create
    - delete
    - get
  - apiGroups:
    - template.openshift.io
    resources:
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - create
    - delete
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    - services
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - routes
    verbs:
    - get
  - apiGroups:
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:11Z
    name: system:openshift:controller:unidling-controller
    namespace: ""
    resourceVersion: "8377"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Acontroller%3Aunidling-controller
    uid: bf46b4f2-8e3d-4db2-8e70-6f71ccef4375
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    - replicationcontrollers/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - replicationcontrollers
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    verbs:
    - get
    - patch
    - update
  - apiGroups:
    - apps
    - extensions
    resources:
    - deployments/scale
    - replicasets/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/scale
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:openshift:discovery
    namespace: ""
    resourceVersion: "8348"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Adiscovery
    uid: ed3e9787-6409-4e9e-81db-2cf42aa9564b
  rules:
  - nonResourceURLs:
    - /version
    - /version/*
    - /api
    - /api/*
    - /apis
    - /apis/*
    - /oapi
    - /oapi/*
    - /openapi/v2
    - /swaggerapi
    - /swaggerapi/*
    - /swagger.json
    - /swagger-2.0.0.pb-v1
    - /osapi
    - /osapi/
    - /.well-known
    - /.well-known/*
    - /
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:36Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-kube-controller-manager-operator
      operation: Update
      time: 2020-06-25T07:11:36Z
    name: system:openshift:kube-controller-manager:gce-cloud-provider
    namespace: ""
    resourceVersion: "3754"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Akube-controller-manager%3Agce-cloud-provider
    uid: 882e993b-21fe-4150-b520-972caa6b6309
  rules:
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
  - apiGroups:
    - ""
    resources:
    - services/status
    verbs:
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:07:17Z
    labels:
      rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:rbac.authorization.k8s.io/aggregate-to-cluster-reader: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: system:openshift:machine-config-operator:cluster-reader
    namespace: ""
    resourceVersion: "616"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Amachine-config-operator%3Acluster-reader
    uid: 5851fa34-4cb7-40ad-bca9-94d8cb8e01d5
  rules:
  - apiGroups:
    - machineconfiguration.openshift.io
    resources:
    - containerruntimeconfigs
    - controllerconfigs
    - kubeletconfigs
    - machineconfigpools
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:15Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-openshift-controller-manager-operator
      operation: Update
      time: 2020-06-25T07:11:15Z
    name: system:openshift:openshift-controller-manager
    namespace: ""
    resourceVersion: "3000"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Aopenshift-controller-manager
    uid: b15b7dbb-9fad-4c5d-8079-633ce3d3bc1b
  rules:
  - apiGroups:
    - '*'
    resources:
    - '*'
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:openshift:public-info-viewer
    namespace: ""
    resourceVersion: "97"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Apublic-info-viewer
    uid: e23616ae-dfb1-432e-b805-b8647a1d0b38
  rules:
  - nonResourceURLs:
    - /.well-known
    - /.well-known/*
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:17Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:17Z
    name: system:openshift:scc:anyuid
    namespace: ""
    resourceVersion: "590"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Aanyuid
    uid: 2d31bf2a-b926-4e8b-8093-b3c7e785af30
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - anyuid
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:18Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:18Z
    name: system:openshift:scc:hostaccess
    namespace: ""
    resourceVersion: "726"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Ahostaccess
    uid: bee65f2a-fdf6-46ef-b3bd-25a5b0e0815c
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - hostaccess
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:20Z
    name: system:openshift:scc:hostmount
    namespace: ""
    resourceVersion: "773"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Ahostmount
    uid: 9f46f9d3-b2d6-4eed-b05e-4f8d034a7bbe
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - hostmount
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:21Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:21Z
    name: system:openshift:scc:hostnetwork
    namespace: ""
    resourceVersion: "833"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Ahostnetwork
    uid: d58df955-9add-46d4-b689-67f7833afb23
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - hostnetwork
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: system:openshift:scc:nonroot
    namespace: ""
    resourceVersion: "865"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Anonroot
    uid: d377d92c-3c6d-4587-aacc-b0d7c82261f6
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - nonroot
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:22Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:22Z
    name: system:openshift:scc:privileged
    namespace: ""
    resourceVersion: "893"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Aprivileged
    uid: c8b83216-24c9-494d-b758-d11da3dcb437
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - privileged
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:07:23Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: cluster-version-operator
      operation: Update
      time: 2020-06-25T07:07:23Z
    name: system:openshift:scc:restricted
    namespace: ""
    resourceVersion: "921"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Ascc%3Arestricted
    uid: 4da144c8-034f-4778-9934-673011effa42
  rules:
  - apiGroups:
    - security.openshift.io
    resourceNames:
    - restricted
    resources:
    - securitycontextconstraints
    verbs:
    - use
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:11Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:openshift:templateservicebroker-client
    namespace: ""
    resourceVersion: "8356"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Atemplateservicebroker-client
    uid: 612de3f1-c65f-4b44-9d87-ccc523207ff5
  rules:
  - nonResourceURLs:
    - /brokers/template.openshift.io/*
    verbs:
    - delete
    - get
    - put
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:11:15Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: cluster-openshift-controller-manager-operator
      operation: Update
      time: 2020-06-25T07:11:15Z
    name: system:openshift:tokenreview-openshift-controller-manager
    namespace: ""
    resourceVersion: "3004"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aopenshift%3Atokenreview-openshift-controller-manager
    uid: f19e4db4-f682-4883-8940-d09e2bb0bafe
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:persistent-volume-provisioner
    namespace: ""
    resourceVersion: "115"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Apersistent-volume-provisioner
    uid: a2c9c26d-9bd0-4e88-8c11-3b3a8f292f8a
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - watch
  - apiGroups:
    - ""
    - events.k8s.io
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:public-info-viewer
    namespace: ""
    resourceVersion: "99"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Apublic-info-viewer
    uid: c0acd414-e110-4d5c-8077-98130db5e779
  rules:
  - nonResourceURLs:
    - /healthz
    - /livez
    - /readyz
    - /version
    - /version/
    verbs:
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      imageregistry.operator.openshift.io/checksum: sha256:4f5c458a9529be990802411d939d2126b77fa47083541be8946d4ca262db41d0
    creationTimestamp: 2020-06-25T07:18:20Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:imageregistry.operator.openshift.io/checksum: {}
        f:rules: {}
      manager: cluster-image-registry-operator
      operation: Update
      time: 2020-06-25T07:18:20Z
    name: system:registry
    namespace: ""
    resourceVersion: "12682"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aregistry
    uid: a9d15b0c-0ebe-41b5-afe2-616f4669a76c
  rules:
  - apiGroups:
    - ""
    resources:
    - limitranges
    - resourcequotas
    verbs:
    - list
  - apiGroups:
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreams/layers
    - imagestreams/secrets
    verbs:
    - get
  - apiGroups:
    - image.openshift.io
    resources:
    - imagestreams
    verbs:
    - get
    - update
  - apiGroups:
    - image.openshift.io
    resources:
    - imagestreamtags
    verbs:
    - delete
  - apiGroups:
    - image.openshift.io
    resources:
    - images
    verbs:
    - get
    - update
  - apiGroups:
    - image.openshift.io
    resources:
    - imagestreammappings
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:router
    namespace: ""
    resourceVersion: "8343"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Arouter
    uid: f43fa142-2187-466a-b5d7-4c33aadedf24
  rules:
  - apiGroups:
    - ""
    resources:
    - endpoints
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - services
    verbs:
    - list
    - watch
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:09Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:09Z
    name: system:scope-impersonation
    namespace: ""
    resourceVersion: "8304"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Ascope-impersonation
    uid: 3c953ce4-e06b-46a3-a2bc-43c2a0a3f0a1
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - userextras/scopes.authorization.openshift.io
    verbs:
    - impersonate
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:sdn-manager
    namespace: ""
    resourceVersion: "8346"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Asdn-manager
    uid: d62da463-1cac-4694-8a68-c4a118d5c93f
  rules:
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - hostsubnets
    - netnamespaces
    verbs:
    - create
    - delete
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - clusternetworks
    verbs:
    - create
    - get
  - apiGroups:
    - ""
    resources:
    - nodes
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:sdn-reader
    namespace: ""
    resourceVersion: "8345"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Asdn-reader
    uid: 23fdabec-aeb5-4a5d-8b60-83ba906cd088
  rules:
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - egressnetworkpolicies
    - hostsubnets
    - netnamespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - network.openshift.io
    resources:
    - clusternetworks
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - events
    verbs:
    - create
    - patch
    - update
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
        f:rules: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    name: system:volume-scheduler
    namespace: ""
    resourceVersion: "118"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Avolume-scheduler
    uid: a9da5203-f12d-4f48-83b1-6abf9be317a0
  rules:
  - apiGroups:
    - ""
    resources:
    - persistentvolumes
    verbs:
    - get
    - list
    - patch
    - update
    - watch
  - apiGroups:
    - storage.k8s.io
    resources:
    - storageclasses
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - persistentvolumeclaims
    verbs:
    - get
    - list
    - patch
    - update
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:15:10Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
        f:rules: {}
      manager: openshift-apiserver
      operation: Update
      time: 2020-06-25T07:15:10Z
    name: system:webhook
    namespace: ""
    resourceVersion: "8347"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Awebhook
    uid: cf356fba-f584-4127-80dc-d66332ac3ccd
  rules:
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs/webhooks
    verbs:
    - create
    - get
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:18:14Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:18:13Z
    name: telemeter-client
    namespace: ""
    resourceVersion: "12310"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/telemeter-client
    uid: c6cb302d-9ba0-4056-907b-84e1b620f4c7
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:25:01Z
    labels:
      app.kubernetes.io/component: query-layer
      app.kubernetes.io/instance: thanos-querier
      app.kubernetes.io/name: thanos-query
      app.kubernetes.io/version: 0.11.0
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/instance: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/version: {}
        f:rules: {}
      manager: operator
      operation: Update
      time: 2020-06-25T07:25:01Z
    name: thanos-querier
    namespace: ""
    resourceVersion: "19088"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/thanos-querier
    uid: a97925c4-910d-45db-9022-0f8efe20208e
  rules:
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
- aggregationRule:
    clusterRoleSelectors:
    - matchLabels:
        rbac.authorization.k8s.io/aggregate-to-view: "true"
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    creationTimestamp: 2020-06-25T07:06:45Z
    labels:
      kubernetes.io/bootstrapping: rbac-defaults
      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:aggregationRule:
          .: {}
          f:clusterRoleSelectors: {}
        f:metadata:
          f:annotations:
            .: {}
            f:rbac.authorization.kubernetes.io/autoupdate: {}
          f:labels:
            .: {}
            f:kubernetes.io/bootstrapping: {}
            f:rbac.authorization.k8s.io/aggregate-to-edit: {}
      manager: kube-apiserver
      operation: Update
      time: 2020-06-25T07:06:45Z
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:rules: {}
      manager: kube-controller-manager
      operation: Update
      time: 2020-06-25T12:02:16Z
    name: view
    namespace: ""
    resourceVersion: "120103"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/view
    uid: d5305770-3083-4277-95e3-4a9740290ad6
  rules:
  - apiGroups:
    - operators.coreos.com
    resources:
    - clusterserviceversions
    - catalogsources
    - installplans
    - subscriptions
    - operatorgroups
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    - packagemanifests/icon
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apiextensions.k8s.io
    resourceNames:
    - checlusters.org.eclipse.che
    resources:
    - customresourcedefinitions
    verbs:
    - get
  - apiGroups:
    - org.eclipse.che
    resources:
    - checlusters
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - packages.operators.coreos.com
    resources:
    - packagemanifests
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreamimages
    - imagestreammappings
    - imagestreams
    - imagestreamtags
    - imagetags
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/layers
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
  - apiGroups:
    - ""
    - project.openshift.io
    resources:
    - projects
    verbs:
    - get
  - apiGroups:
    - ""
    resources:
    - configmaps
    - endpoints
    - persistentvolumeclaims
    - persistentvolumeclaims/status
    - pods
    - replicationcontrollers
    - replicationcontrollers/scale
    - serviceaccounts
    - services
    - services/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - bindings
    - events
    - limitranges
    - namespaces/status
    - pods/log
    - pods/status
    - replicationcontrollers/status
    - resourcequotas
    - resourcequotas/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - controllerrevisions
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - replicasets
    - replicasets/scale
    - replicasets/status
    - statefulsets
    - statefulsets/scale
    - statefulsets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - autoscaling
    resources:
    - horizontalpodautoscalers
    - horizontalpodautoscalers/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - batch
    resources:
    - cronjobs
    - cronjobs/status
    - jobs
    - jobs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - extensions
    resources:
    - daemonsets
    - daemonsets/status
    - deployments
    - deployments/scale
    - deployments/status
    - ingresses
    - ingresses/status
    - networkpolicies
    - replicasets
    - replicasets/scale
    - replicasets/status
    - replicationcontrollers/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - policy
    resources:
    - poddisruptionbudgets
    - poddisruptionbudgets/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - networking.k8s.io
    resources:
    - ingresses
    - ingresses/status
    - networkpolicies
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - metrics.k8s.io
    resources:
    - pods
    - nodes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildconfigs
    - buildconfigs/webhooks
    - builds
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - builds/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - build.openshift.io
    resources:
    - jenkins
    verbs:
    - view
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs
    - deploymentconfigs/scale
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - apps.openshift.io
    resources:
    - deploymentconfigs/log
    - deploymentconfigs/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - image.openshift.io
    resources:
    - imagestreams/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - quota.openshift.io
    resources:
    - appliedclusterresourcequotas
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - route.openshift.io
    resources:
    - routes/status
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - template.openshift.io
    resources:
    - processedtemplates
    - templateconfigs
    - templateinstances
    - templates
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    - build.openshift.io
    resources:
    - buildlogs
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ""
    resources:
    - resourcequotausages
    verbs:
    - get
    - list
    - watch
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    creationTimestamp: 2020-06-25T07:10:03Z
    managedFields:
    - apiVersion: rbac.authorization.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d"}:
              .: {}
              f:apiVersion: {}
              f:blockOwnerDeletion: {}
              f:controller: {}
              f:kind: {}
              f:name: {}
              f:uid: {}
        f:rules: {}
      manager: cluster-network-operator
      operation: Update
      time: 2020-06-25T07:10:03Z
    name: whereabouts-cni
    namespace: ""
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 0e6a6812-ff7b-42ed-a7e1-01ba6ab8263d
    resourceVersion: "2329"
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/whereabouts-cni
    uid: 768e56cd-f57c-4a77-8bca-e1402b967706
  rules:
  - apiGroups:
    - whereabouts.cni.cncf.io
    resources:
    - ippools
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""
