Add service account for trigger. It's important!

limbo/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
 - limbo-just-build.yaml
 - limbo-pipeline.yaml
-- limbo-trigger.yaml
+- limbo-trigger.yaml
+- service-account.yaml

limbo/limbo-trigger.yaml

@@ -4,6 +4,7 @@ kind: EventListener
 metadata:
   name: limbo-pipeline-listener
 spec:
+  serviceAccountName: limbo-serviceaccount
   triggers:
     - name: limbo-pipeline-trigger
       bindings:

limbo/service-account.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: limbo-serviceaccount
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: limbo-eventlistener-binding
+subjects:
+- kind: ServiceAccount
+  name: limbo-serviceaccount
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: tekton-triggers-eventlistener-roles
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: limbo-eventlistener-clusterbinding
+subjects:
+- kind: ServiceAccount
+  name: limbo-serviceaccount
+  namespace: j7s-ci
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: tekton-triggers-eventlistener-clusterroles