20 lines
728 B
YAML
20 lines
728 B
YAML
# If this ClusterRoleBinding is replaced with a RoleBinding
|
|
# then the ClusterRole would be namespaced. The access described by
|
|
# the tekton-pipelines-controller-tenant-access ClusterRole would
|
|
# be scoped to individual tenant namespaces.
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: tekton-pipelines-controller-tenant-access
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
roleRef:
|
|
kind: ClusterRole
|
|
name: tekton-pipelines-controller-tenant-access
|
|
apiGroup: rbac.authorization.k8s.io |