diff --git a/rbac.yaml b/rbac.yaml index c7248fa..30b8620 100644 --- a/rbac.yaml +++ b/rbac.yaml @@ -5,14 +5,13 @@ metadata: namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - name: tekton-triggers-role - namespace: tekton-pipelines + name: tekton-triggers-cluster-role rules: # Permissions to allow the EventListener to see its own config - apiGroups: ["triggers.tekton.dev"] - resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"] + resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers", "interceptors", "clusterinterceptors", "clustertriggerbindings"] verbs: ["get", "list", "watch"] # Permissions to allow the EventListener to start pipelines - apiGroups: ["tekton.dev"] @@ -28,14 +27,14 @@ rules: verbs: ["get", "list", "create", "update", "patch"] --- apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: name: tekton-triggers-binding - namespace: tekton-pipelines +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-triggers-cluster-role subjects: - kind: ServiceAccount name: tekton-triggers-sa -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: tekton-triggers-role \ No newline at end of file + namespace: tekton-pipelines \ No newline at end of file