fix: cluster rbac role

This commit is contained in:
eding 2026-02-09 17:11:02 +01:00
parent ce5d065275
commit 97d050f463

View file

@ -5,14 +5,13 @@ metadata:
namespace: tekton-pipelines namespace: tekton-pipelines
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: ClusterRole
metadata: metadata:
name: tekton-triggers-role name: tekton-triggers-cluster-role
namespace: tekton-pipelines
rules: rules:
# Permissions to allow the EventListener to see its own config # Permissions to allow the EventListener to see its own config
- apiGroups: ["triggers.tekton.dev"] - apiGroups: ["triggers.tekton.dev"]
resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"] resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers", "interceptors", "clusterinterceptors", "clustertriggerbindings"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
# Permissions to allow the EventListener to start pipelines # Permissions to allow the EventListener to start pipelines
- apiGroups: ["tekton.dev"] - apiGroups: ["tekton.dev"]
@ -28,14 +27,14 @@ rules:
verbs: ["get", "list", "create", "update", "patch"] verbs: ["get", "list", "create", "update", "patch"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: tekton-triggers-binding name: tekton-triggers-binding
namespace: tekton-pipelines roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-triggers-cluster-role
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: tekton-triggers-sa name: tekton-triggers-sa
roleRef: namespace: tekton-pipelines
apiGroup: rbac.authorization.k8s.io
kind: Role
name: tekton-triggers-role