diff --git a/limbo/kustomization.yaml b/limbo/kustomization.yaml index 9d7509f..2880ab4 100644 --- a/limbo/kustomization.yaml +++ b/limbo/kustomization.yaml @@ -3,4 +3,5 @@ kind: Kustomization resources: - limbo-just-build.yaml - limbo-pipeline.yaml -- limbo-trigger.yaml \ No newline at end of file +- limbo-trigger.yaml +- service-account.yaml \ No newline at end of file diff --git a/limbo/limbo-trigger.yaml b/limbo/limbo-trigger.yaml index a0fb49c..0ef26e9 100644 --- a/limbo/limbo-trigger.yaml +++ b/limbo/limbo-trigger.yaml @@ -3,6 +3,7 @@ apiVersion: triggers.tekton.dev/v1beta1 kind: EventListener metadata: name: limbo-pipeline-listener + serviceAccountName: limbo-serviceaccount spec: triggers: - name: limbo-pipeline-trigger diff --git a/limbo/service-account.yaml b/limbo/service-account.yaml new file mode 100644 index 0000000..2a625fd --- /dev/null +++ b/limbo/service-account.yaml @@ -0,0 +1,29 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: limbo-serviceaccount +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: limbo-eventlistener-binding +subjects: +- kind: ServiceAccount + name: limbo-serviceaccount +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-triggers-eventlistener-roles +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: limbo-eventlistener-clusterbinding +subjects: +- kind: ServiceAccount + name: limbo-serviceaccount + namespace: j7s-ci +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tekton-triggers-eventlistener-clusterroles \ No newline at end of file