diff --git a/components/release/base/kustomization.yaml b/components/release/base/kustomization.yaml index 3313e531db0..af48a0028e9 100644 --- a/components/release/base/kustomization.yaml +++ b/components/release/base/kustomization.yaml @@ -1,11 +1,12 @@ resources: -- allow-argocd-to-manage.yaml -- argocd-permissions.yaml -- release-pipeline-resources-clusterrole.yaml -- release-service-config-rbac.yaml -- release-service-configurator-role.yaml -- release-team.yaml -- cronjobs/ + - allow-argocd-to-manage.yaml + - argocd-permissions.yaml + - monitor-pipeline-role.yaml + - release-pipeline-resources-clusterrole.yaml + - release-service-config-rbac.yaml + - release-service-configurator-role.yaml + - release-team.yaml + - cronjobs/ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization diff --git a/components/release/base/monitor-pipeline-role.yaml b/components/release/base/monitor-pipeline-role.yaml new file mode 100644 index 00000000000..95de68fa28e --- /dev/null +++ b/components/release/base/monitor-pipeline-role.yaml @@ -0,0 +1,12 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: monitor-pipeline-role +rules: + - apiGroups: [""] + resources: ["pods", "pods/log"] + verbs: ["get", "watch", "list"] + - apiGroups: ["tekton.dev"] + resources: ["pipelineruns", "pipelines"] + verbs: ["get", "watch", "list"]