--- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: capability.openshift.io/name: MachineAPI include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-03-08T03:06:33Z" managedFields: - apiVersion: rbac.authorization.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:ownerReferences: .: {} k:{"uid":"dccf346d-584c-47c6-a1e9-7a6c7eec3e5a"}: {} f:rules: {} manager: cluster-version-operator operation: Update time: "2026-03-08T03:06:33Z" name: machine-api-controllers namespace: openshift-machine-api ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: dccf346d-584c-47c6-a1e9-7a6c7eec3e5a resourceVersion: "2259" uid: 5843f1e6-2fdb-4933-9fa0-30a9201cc890 rules: - apiGroups: - machine.openshift.io resources: - '*' verbs: - '*' - apiGroups: - healthchecking.openshift.io resources: - '*' verbs: - '*' - apiGroups: - "" resources: - configmaps verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - secrets verbs: - get - list - watch - create - update - patch - delete - apiGroups: - coordination.k8s.io resources: - leases verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - events verbs: - create - watch - list - patch - apiGroups: - metal3.io resources: - baremetalhosts verbs: - get - list - watch - update - patch - apiGroups: - metal3.io resources: - baremetalhosts/status - baremetalhosts/finalizers verbs: - update - apiGroups: - ipam.cluster.x-k8s.io resources: - ipaddresses verbs: - get - list - apiGroups: - ipam.cluster.x-k8s.io resources: - ipaddressclaims verbs: - '*'