fix: cluster rbac role
This commit is contained in:
parent
ce5d065275
commit
97d050f463
19
rbac.yaml
19
rbac.yaml
|
|
@ -5,14 +5,13 @@ metadata:
|
||||||
namespace: tekton-pipelines
|
namespace: tekton-pipelines
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: tekton-triggers-role
|
name: tekton-triggers-cluster-role
|
||||||
namespace: tekton-pipelines
|
|
||||||
rules:
|
rules:
|
||||||
# Permissions to allow the EventListener to see its own config
|
# Permissions to allow the EventListener to see its own config
|
||||||
- apiGroups: ["triggers.tekton.dev"]
|
- apiGroups: ["triggers.tekton.dev"]
|
||||||
resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"]
|
resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers", "interceptors", "clusterinterceptors", "clustertriggerbindings"]
|
||||||
verbs: ["get", "list", "watch"]
|
verbs: ["get", "list", "watch"]
|
||||||
# Permissions to allow the EventListener to start pipelines
|
# Permissions to allow the EventListener to start pipelines
|
||||||
- apiGroups: ["tekton.dev"]
|
- apiGroups: ["tekton.dev"]
|
||||||
|
|
@ -28,14 +27,14 @@ rules:
|
||||||
verbs: ["get", "list", "create", "update", "patch"]
|
verbs: ["get", "list", "create", "update", "patch"]
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: tekton-triggers-binding
|
name: tekton-triggers-binding
|
||||||
namespace: tekton-pipelines
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: tekton-triggers-cluster-role
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: tekton-triggers-sa
|
name: tekton-triggers-sa
|
||||||
roleRef:
|
namespace: tekton-pipelines
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
|
||||||
name: tekton-triggers-role
|
|
||||||
Loading…
Reference in a new issue