Lightweight Kubernetes Agent (LWK) Permissions

IT Asset Management (Cloud)

Core permissions

  • Read-only access (get, list, watch) to nodes, namespaces, and pods.

Optional permissions

  • OLM Support—Read-only access to resources like clusterserviceversions, catalogsources, installplans, subscriptions, and operatorgroups.
  • Storage Resources—Read-only access to persistentvolumes, persistentvolumeclaims, and storageclasses.
  • IBM Licensing—Read-only access to IBM License Service API endpoints (for example, /products, /bundled_products, /snapshot, /health, /version) by way of the ibm-license-service-api-access ClusterRole.

IT Asset Management (Cloud)

Current