fix: cluster rbac role

rbac.yaml

@@ -5,14 +5,13 @@ metadata:
   namespace: tekton-pipelines
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
-  name: tekton-triggers-role
-  namespace: tekton-pipelines
+  name: tekton-triggers-cluster-role
 rules:
   # Permissions to allow the EventListener to see its own config
   - apiGroups: ["triggers.tekton.dev"]
-    resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"]
+    resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers", "interceptors", "clusterinterceptors", "clustertriggerbindings"]
     verbs: ["get", "list", "watch"]
   # Permissions to allow the EventListener to start pipelines
   - apiGroups: ["tekton.dev"]
@@ -28,14 +27,14 @@ rules:
     verbs: ["get", "list", "create", "update", "patch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: tekton-triggers-binding
-  namespace: tekton-pipelines
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: tekton-triggers-cluster-role
 subjects:
   - kind: ServiceAccount
     name: tekton-triggers-sa
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: tekton-triggers-role
+    namespace: tekton-pipelines