--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: capability.openshift.io/name: MachineAPI include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-03-13T10:39:28Z" managedFields: - apiVersion: rbac.authorization.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:ownerReferences: .: {} k:{"uid":"8b58f7c7-f817-402d-8601-c1b1c4219b1a"}: {} f:rules: {} manager: cluster-version-operator operation: Update time: "2026-03-13T10:39:28Z" name: machine-api-controllers ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 8b58f7c7-f817-402d-8601-c1b1c4219b1a resourceVersion: "9147" uid: 88deb2e9-3ca5-45bb-87d7-c2bce3d66add rules: - apiGroups: - "" resources: - nodes verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - pods verbs: - get - list - watch - delete - apiGroups: - "" resources: - pods/eviction verbs: - create - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create - apiGroups: - extensions resources: - daemonsets verbs: - get - list - watch - apiGroups: - apps resources: - daemonsets verbs: - get - list - watch - apiGroups: - config.openshift.io resources: - infrastructures - dnses - clusterversions - featuregates verbs: - get - list - watch - apiGroups: - machineconfiguration.openshift.io resources: - machineconfigs - machineconfigpools verbs: - get - list - watch