From 97d050f463da1b468d8c0b2ac3058687fba43d04 Mon Sep 17 00:00:00 2001
From: eding <edin.grech@gmail.com>
Date: Mon, 9 Feb 2026 17:11:02 +0100
Subject: [PATCH] fix: cluster rbac role

---
 rbac.yaml | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/rbac.yaml b/rbac.yaml
index c7248fa..30b8620 100644
--- a/rbac.yaml
+++ b/rbac.yaml
@@ -5,14 +5,13 @@ metadata:
   namespace: tekton-pipelines
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
-  name: tekton-triggers-role
-  namespace: tekton-pipelines
+  name: tekton-triggers-cluster-role
 rules:
   # Permissions to allow the EventListener to see its own config
   - apiGroups: ["triggers.tekton.dev"]
-    resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"]
+    resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers", "interceptors", "clusterinterceptors", "clustertriggerbindings"]
     verbs: ["get", "list", "watch"]
   # Permissions to allow the EventListener to start pipelines
   - apiGroups: ["tekton.dev"]
@@ -28,14 +27,14 @@ rules:
     verbs: ["get", "list", "create", "update", "patch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: tekton-triggers-binding
-  namespace: tekton-pipelines
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: tekton-triggers-cluster-role
 subjects:
   - kind: ServiceAccount
     name: tekton-triggers-sa
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: tekton-triggers-role
\ No newline at end of file
+    namespace: tekton-pipelines
\ No newline at end of file