---
apiVersion: cloudcredential.openshift.io/v1
kind: CredentialsRequest
metadata:
  annotations:
    capability.openshift.io/name: MachineAPI+CloudCredential
    exclude.release.openshift.io/internal-openshift-hosted: "true"
    include.release.openshift.io/self-managed-high-availability: "true"
  creationTimestamp: "2025-10-11T10:25:35Z"
  generation: 1
  labels:
    controller-tools.k8s.io: "1.0"
  managedFields:
  - apiVersion: cloudcredential.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:capability.openshift.io/name: {}
          f:exclude.release.openshift.io/internal-openshift-hosted: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
        f:labels:
          .: {}
          f:controller-tools.k8s.io: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"d5f199fe-acec-4610-b505-6d5fa3929e77"}: {}
      f:spec:
        .: {}
        f:providerSpec:
          .: {}
          f:apiVersion: {}
          f:kind: {}
          f:permissions: {}
        f:secretRef: {}
        f:serviceAccountNames: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-10-11T10:25:35Z"
  - apiVersion: cloudcredential.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions: {}
        f:lastSyncGeneration: {}
        f:provisioned: {}
    manager: cloud-credential-operator
    operation: Update
    subresource: status
    time: "2025-10-11T10:26:47Z"
  name: openshift-machine-api-gcp
  namespace: openshift-cloud-credential-operator
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    controller: true
    kind: ClusterVersion
    name: version
    uid: d5f199fe-acec-4610-b505-6d5fa3929e77
  resourceVersion: "2808"
  uid: 9457f149-f52f-4104-af28-ca3273835fae
spec:
  providerSpec:
    apiVersion: cloudcredential.openshift.io/v1
    kind: GCPProviderSpec
    permissions:
    - iam.serviceAccounts.actAs
    - iam.serviceAccounts.get
    - iam.serviceAccounts.list
    - compute.acceleratorTypes.get
    - compute.acceleratorTypes.list
    - compute.disks.create
    - compute.disks.createTagBinding
    - compute.disks.setLabels
    - compute.globalOperations.get
    - compute.globalOperations.list
    - compute.healthChecks.useReadOnly
    - compute.images.get
    - compute.images.getFromFamily
    - compute.images.useReadOnly
    - compute.instanceGroups.create
    - compute.instanceGroups.delete
    - compute.instanceGroups.get
    - compute.instanceGroups.list
    - compute.instanceGroups.update
    - compute.instances.create
    - compute.instances.createTagBinding
    - compute.instances.delete
    - compute.instances.get
    - compute.instances.list
    - compute.instances.use
    - compute.instances.setLabels
    - compute.instances.setMetadata
    - compute.instances.setTags
    - compute.instances.setServiceAccount
    - compute.instances.update
    - compute.machineTypes.get
    - compute.machineTypes.list
    - compute.projects.get
    - compute.regionBackendServices.get
    - compute.regionBackendServices.create
    - compute.regionBackendServices.update
    - compute.regions.get
    - compute.regions.list
    - compute.subnetworks.use
    - compute.subnetworks.useExternalIp
    - compute.targetPools.addInstance
    - compute.targetPools.delete
    - compute.targetPools.get
    - compute.targetPools.removeInstance
    - compute.zoneOperations.get
    - compute.zoneOperations.list
    - compute.zones.get
    - compute.zones.list
    - resourcemanager.tagValues.get
    - resourcemanager.tagValues.list
    - serviceusage.quotas.get
    - serviceusage.services.get
    - serviceusage.services.list
  secretRef:
    name: gcp-cloud-credentials
    namespace: openshift-machine-api
  serviceAccountNames:
  - machine-api-controllers
status:
  conditions:
  - lastProbeTime: "2025-10-11T10:26:47Z"
    lastTransitionTime: "2025-10-11T10:26:47Z"
    message: CredentialsRequest is not for platform None
    reason: InfrastructureMismatch
    status: "True"
    type: Ignored
  lastSyncGeneration: 0
  provisioned: false