dibyo's point about only EL sink/interceptors reading secrets

tektoncd · Oct 8, 2020 · 8eb2067 · 8eb2067
1 parent 5bae96d
commit 8eb2067
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 63 deletions.
diff --git a/config/200-role.yaml b/config/200-role.yaml
diff --git a/config/201-rolebinding.yaml b/config/201-rolebinding.yaml
diff --git a/examples/role-resources/clustertriggerbinding-roles/clusterrole.yaml b/examples/role-resources/clustertriggerbinding-roles/clusterrole.yaml
@@ -9,7 +9,7 @@ rules:
   verbs: ["get"]
 - apiGroups: [""]
   # secrets are only needed for Github/Gitlab interceptors
-  resources: ["configmaps", "secrets"]
+  resources: ["configmaps"]
   verbs: ["get", "list", "watch"]
 # Permissions to create resources in associated TriggerTemplates
 - apiGroups: ["tekton.dev"]