Managed Velero CredentialRequest

0000_90_managed-veler-operator_06_managed-velero-operator-iam-credentials.yaml

apiVersion: cloudcredential.openshift.io/v1
kind: CredentialsRequest
metadata:
  name: managed-velero-operator-iam-credentials-aws
  namespace: openshift-velero
spec:
  secretRef:
    name: managed-velero-operator-iam-credentials
    namespace: openshift-velero
  providerSpec:
    apiVersion: cloudcredential.openshift.io/v1
    kind: AWSProviderSpec
    statementEntries:
    - effect: Allow
      action:
      - s3:CreateBucket
      - s3:DeleteObjectTagging
      - s3:GetBucketLocation
      - s3:GetBucketTagging
      - s3:ListAllMyBuckets
      - s3:ListBucket
      - s3:PutBucketAcl
      - s3:PutBucketPublicAccessBlock
      - s3:PutBucketTagging
      - s3:PutEncryptionConfiguration
      - s3:PutLifecycleConfiguration
      resource: "*"