apiVersion: v1 kind: Namespace metadata: name: tekton-dashboard labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard --- apiVersion: v1 kind: Namespace metadata: name: tekton-pipelines labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pod-security.kubernetes.io/enforce: restricted --- apiVersion: v1 kind: Namespace metadata: name: tekton-pipelines-resolvers labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pod-security.kubernetes.io/enforce: restricted --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: clusterinterceptors.triggers.tekton.dev labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: ClusterInterceptor plural: clusterinterceptors shortNames: - ci singular: clusterinterceptor scope: Cluster versions: - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: clustertasks.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1beta1 group: tekton.dev names: categories: - tekton - tekton-pipelines kind: ClusterTask plural: clustertasks singular: clustertask preserveUnknownFields: false scope: Cluster versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: clustertriggerbindings.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: ClusterTriggerBinding plural: clustertriggerbindings shortNames: - ctb singular: clustertriggerbinding scope: Cluster versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: customruns.tekton.dev spec: group: tekton.dev names: categories: - tekton - tekton-pipelines kind: CustomRun plural: customruns singular: customrun preserveUnknownFields: false scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=="Succeeded")].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=="Succeeded")].reason name: Reason type: string - jsonPath: .status.startTime name: StartTime type: date - jsonPath: .status.completionTime name: CompletionTime type: date name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: eventlisteners.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: EventListener plural: eventlisteners shortNames: - el singular: eventlistener scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.address.url name: Address type: string - jsonPath: .status.conditions[?(@.type=='Available')].status name: Available type: string - jsonPath: .status.conditions[?(@.type=='Available')].reason name: Reason type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status name: Ready type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason name: Reason type: string name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} - additionalPrinterColumns: - jsonPath: .status.address.url name: Address type: string - jsonPath: .status.conditions[?(@.type=='Available')].status name: Available type: string - jsonPath: .status.conditions[?(@.type=='Available')].reason name: Reason type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status name: Ready type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason name: Reason type: string name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: extensions.dashboard.tekton.dev spec: group: dashboard.tekton.dev names: categories: - tekton - tekton-dashboard kind: Extension plural: extensions shortNames: - ext - exts preserveUnknownFields: false scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .spec.apiVersion name: API version type: string - jsonPath: .spec.name name: Kind type: string - jsonPath: .spec.displayname name: Display name type: string - jsonPath: .metadata.creationTimestamp name: Age type: date name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: interceptors.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: Interceptor plural: interceptors shortNames: - ni singular: interceptor scope: Namespaced versions: - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: pipelineruns.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1beta1 - v1 group: tekton.dev names: categories: - tekton - tekton-pipelines kind: PipelineRun plural: pipelineruns shortNames: - pr - prs singular: pipelinerun preserveUnknownFields: false scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=="Succeeded")].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=="Succeeded")].reason name: Reason type: string - jsonPath: .status.startTime name: StartTime type: date - jsonPath: .status.completionTime name: CompletionTime type: date name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=="Succeeded")].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=="Succeeded")].reason name: Reason type: string - jsonPath: .status.startTime name: StartTime type: date - jsonPath: .status.completionTime name: CompletionTime type: date name: v1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: pipelines.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1beta1 - v1 group: tekton.dev names: categories: - tekton - tekton-pipelines kind: Pipeline plural: pipelines singular: pipeline preserveUnknownFields: false scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} - name: v1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: resolution.tekton.dev/release: devel name: resolutionrequests.resolution.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1alpha1 - v1beta1 group: resolution.tekton.dev names: categories: - tekton - tekton-pipelines kind: ResolutionRequest plural: resolutionrequests shortNames: - resolutionrequest - resolutionrequests singular: resolutionrequest scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=='Succeeded')].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=='Succeeded')].reason name: Reason type: string deprecated: true name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} - additionalPrinterColumns: - jsonPath: .metadata.ownerReferences[0].kind name: OwnerKind type: string - jsonPath: .metadata.ownerReferences[0].name name: Owner type: string - jsonPath: .status.conditions[?(@.type=='Succeeded')].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=='Succeeded')].reason name: Reason type: string - jsonPath: .metadata.creationTimestamp name: StartTime type: string - jsonPath: .status.conditions[?(@.type=='Succeeded')].lastTransitionTime name: EndTime type: string name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: stepactions.tekton.dev spec: group: tekton.dev names: categories: - tekton - tekton-pipelines kind: StepAction plural: stepactions singular: stepaction preserveUnknownFields: false scope: Namespaced versions: - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: taskruns.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1beta1 - v1 group: tekton.dev names: categories: - tekton - tekton-pipelines kind: TaskRun plural: taskruns shortNames: - tr - trs singular: taskrun preserveUnknownFields: false scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=="Succeeded")].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=="Succeeded")].reason name: Reason type: string - jsonPath: .status.startTime name: StartTime type: date - jsonPath: .status.completionTime name: CompletionTime type: date name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} - additionalPrinterColumns: - jsonPath: .status.conditions[?(@.type=="Succeeded")].status name: Succeeded type: string - jsonPath: .status.conditions[?(@.type=="Succeeded")].reason name: Reason type: string - jsonPath: .status.startTime name: StartTime type: date - jsonPath: .status.completionTime name: CompletionTime type: date name: v1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: tasks.tekton.dev spec: conversion: strategy: Webhook webhook: clientConfig: service: name: tekton-pipelines-webhook namespace: tekton-pipelines conversionReviewVersions: - v1beta1 - v1 group: tekton.dev names: categories: - tekton - tekton-pipelines kind: Task plural: tasks singular: task preserveUnknownFields: false scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} - name: v1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: triggerbindings.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: TriggerBinding plural: triggerbindings shortNames: - tb singular: triggerbinding scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: triggers.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: Trigger plural: triggers shortNames: - tri singular: trigger scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 version: v0.26.1 name: triggertemplates.triggers.tekton.dev spec: group: triggers.tekton.dev names: categories: - tekton - tekton-triggers kind: TriggerTemplate plural: triggertemplates shortNames: - tt singular: triggertemplate scope: Namespaced versions: - name: v1beta1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true subresources: status: {} - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: false subresources: status: {} --- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 version: v0.57.0 name: verificationpolicies.tekton.dev spec: group: tekton.dev names: categories: - tekton - tekton-pipelines kind: VerificationPolicy plural: verificationpolicies singular: verificationpolicy scope: Namespaced versions: - name: v1alpha1 schema: openAPIV3Schema: type: object x-kubernetes-preserve-unknown-fields: true served: true storage: true --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-resolvers namespace: tekton-pipelines-resolvers --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: tekton-dashboard namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-events-controller namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-controller namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors namespace: tekton-pipelines --- apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-webhook namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-resolvers-namespace-rbac namespace: tekton-pipelines-resolvers rules: - apiGroups: - "" resources: - configmaps - secrets verbs: - get - list - update - watch - apiGroups: - coordination.k8s.io resources: - leases verbs: - get - list - create - update - delete - patch - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: tekton-dashboard-info namespace: tekton-pipelines rules: - apiGroups: - "" resourceNames: - dashboard-info resources: - configmaps verbs: - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller namespace: tekton-pipelines rules: - apiGroups: - "" resources: - configmaps verbs: - list - watch - apiGroups: - "" resourceNames: - config-logging - config-observability - feature-flags - config-leader-election-controller - config-registry-cert resources: - configmaps verbs: - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-events-controller namespace: tekton-pipelines rules: - apiGroups: - "" resources: - configmaps verbs: - list - watch - apiGroups: - "" resourceNames: - config-logging - config-observability - feature-flags - config-leader-election-events - config-registry-cert resources: - configmaps verbs: - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-info namespace: tekton-pipelines rules: - apiGroups: - "" resourceNames: - pipelines-info resources: - configmaps verbs: - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-leader-election namespace: tekton-pipelines rules: - apiGroups: - coordination.k8s.io resources: - leases verbs: - get - list - create - update - delete - patch - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook namespace: tekton-pipelines rules: - apiGroups: - "" resources: - configmaps verbs: - list - watch - apiGroups: - "" resourceNames: - config-logging - config-observability - config-leader-election-webhook - feature-flags resources: - configmaps verbs: - get - apiGroups: - "" resources: - secrets verbs: - list - watch - apiGroups: - "" resourceNames: - webhook-certs resources: - secrets verbs: - get - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-admin-webhook namespace: tekton-pipelines rules: - apiGroups: - "" resources: - secrets verbs: - get - list - create - update - delete - patch - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors namespace: tekton-pipelines rules: - apiGroups: - "" resources: - configmaps verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-info namespace: tekton-pipelines rules: - apiGroups: - "" resourceNames: - triggers-info resources: - configmaps verbs: - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines rbac.authorization.k8s.io/aggregate-to-admin: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true" name: tekton-aggregate-edit rules: - apiGroups: - tekton.dev resources: - tasks - taskruns - pipelines - pipelineruns - runs - customruns - stepactions verbs: - create - delete - deletecollection - get - list - patch - update - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines rbac.authorization.k8s.io/aggregate-to-view: "true" name: tekton-aggregate-view rules: - apiGroups: - tekton.dev resources: - tasks - taskruns - pipelines - pipelineruns - runs - customruns - stepactions verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: tekton-dashboard-backend rules: - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - get - list - apiGroups: - security.openshift.io resources: - securitycontextconstraints verbs: - use - apiGroups: - tekton.dev resources: - clustertasks verbs: - get - list - watch - apiGroups: - triggers.tekton.dev resources: - clusterinterceptors - clustertriggerbindings verbs: - get - list - watch - apiGroups: - "" resources: - serviceaccounts verbs: - get - list - watch - apiGroups: - dashboard.tekton.dev resources: - extensions verbs: - create - update - delete - patch - apiGroups: - tekton.dev resources: - clustertasks verbs: - create - update - delete - patch - apiGroups: - triggers.tekton.dev resources: - clusterinterceptors - clustertriggerbindings verbs: - create - update - delete - patch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: tekton-dashboard-cronjobs-extension rules: - apiGroups: - batch resources: - cronjobs verbs: - get - list --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: tekton-dashboard-tenant rules: - apiGroups: - dashboard.tekton.dev resources: - extensions verbs: - get - list - watch - apiGroups: - "" resources: - events - namespaces - pods - pods/log verbs: - get - list - watch - apiGroups: - tekton.dev resources: - tasks - taskruns - pipelines - pipelineruns - customruns verbs: - get - list - watch - apiGroups: - triggers.tekton.dev resources: - eventlisteners - interceptors - triggerbindings - triggers - triggertemplates verbs: - get - list - watch - apiGroups: - tekton.dev resources: - tasks - taskruns - pipelines - pipelineruns - customruns verbs: - create - update - delete - patch - apiGroups: - triggers.tekton.dev resources: - eventlisteners - interceptors - triggerbindings - triggers - triggertemplates verbs: - create - update - delete - patch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-events-controller-cluster-access rules: - apiGroups: - tekton.dev resources: - tasks - clustertasks - taskruns - pipelines - pipelineruns - customruns verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller-cluster-access rules: - apiGroups: - "" resources: - pods verbs: - list - watch - apiGroups: - "" resources: - nodes verbs: - list - apiGroups: - tekton.dev resources: - tasks - clustertasks - taskruns - pipelines - pipelineruns - customruns - stepactions verbs: - get - list - create - update - delete - patch - watch - apiGroups: - tekton.dev resources: - verificationpolicies verbs: - get - list - watch - apiGroups: - tekton.dev resources: - taskruns/finalizers - pipelineruns/finalizers - customruns/finalizers verbs: - get - list - create - update - delete - patch - watch - apiGroups: - tekton.dev resources: - tasks/status - clustertasks/status - taskruns/status - pipelines/status - pipelineruns/status - customruns/status - verificationpolicies/status - stepactions/status verbs: - get - list - create - update - delete - patch - watch - apiGroups: - resolution.tekton.dev resources: - resolutionrequests - resolutionrequests/status verbs: - get - list - create - update - delete - patch - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller-tenant-access rules: - apiGroups: - "" resources: - pods - persistentvolumeclaims verbs: - get - list - create - update - delete - patch - watch - apiGroups: - "" resources: - events verbs: - create - update - patch - apiGroups: - "" resources: - configmaps - limitranges - secrets - serviceaccounts verbs: - get - list - watch - apiGroups: - apps resources: - statefulsets verbs: - get - list - create - update - delete - patch - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-resolvers-resolution-request-updates rules: - apiGroups: - resolution.tekton.dev resources: - resolutionrequests - resolutionrequests/status verbs: - get - list - watch - update - patch - apiGroups: - tekton.dev resources: - tasks - pipelines verbs: - get - list - apiGroups: - "" resources: - secrets verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook-cluster-access rules: - apiGroups: - apiextensions.k8s.io resourceNames: - pipelines.tekton.dev - pipelineruns.tekton.dev - tasks.tekton.dev - clustertasks.tekton.dev - taskruns.tekton.dev - resolutionrequests.resolution.tekton.dev - customruns.tekton.dev - verificationpolicies.tekton.dev - stepactions.tekton.dev resources: - customresourcedefinitions - customresourcedefinitions/status verbs: - get - update - patch - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - list - watch - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations - validatingwebhookconfigurations verbs: - list - watch - apiGroups: - admissionregistration.k8s.io resourceNames: - webhook.pipeline.tekton.dev resources: - mutatingwebhookconfigurations verbs: - get - update - delete - apiGroups: - admissionregistration.k8s.io resourceNames: - validation.webhook.pipeline.tekton.dev - config.webhook.pipeline.tekton.dev resources: - validatingwebhookconfigurations verbs: - get - update - delete - apiGroups: - "" resourceNames: - tekton-pipelines resources: - namespaces verbs: - get - apiGroups: - "" resourceNames: - tekton-pipelines resources: - namespaces/finalizers verbs: - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-admin rules: - apiGroups: - "" resources: - configmaps - services - events verbs: - get - list - create - update - delete - patch - watch - apiGroups: - apps resources: - deployments - deployments/finalizers verbs: - get - list - create - update - delete - patch - watch - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations - validatingwebhookconfigurations verbs: - get - list - create - update - delete - patch - watch - apiGroups: - triggers.tekton.dev resources: - clustertriggerbindings - clusterinterceptors - interceptors - eventlisteners - triggerbindings - triggertemplates - triggers - eventlisteners/finalizers verbs: - get - list - create - update - delete - patch - watch - apiGroups: - triggers.tekton.dev resources: - clustertriggerbindings/status - clusterinterceptors/status - interceptors/status - eventlisteners/status - triggerbindings/status - triggertemplates/status - triggers/status verbs: - get - list - create - update - delete - patch - watch - apiGroups: - coordination.k8s.io resources: - leases verbs: - get - list - create - update - delete - patch - watch - apiGroups: - serving.knative.dev resources: - '*' - '*/status' - '*/finalizers' verbs: - get - list - create - update - delete - deletecollection - patch - watch - apiGroups: - "" resourceNames: - tekton-pipelines resources: - namespaces verbs: - get - apiGroups: - "" resourceNames: - tekton-pipelines resources: - namespaces/finalizers verbs: - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers rbac.authorization.k8s.io/aggregate-to-admin: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true" name: tekton-triggers-aggregate-edit rules: - apiGroups: - triggers.tekton.dev resources: - clustertriggerbindings - clusterinterceptors - eventlisteners - interceptors - triggers - triggerbindings - triggertemplates verbs: - create - delete - deletecollection - get - list - patch - update - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers rbac.authorization.k8s.io/aggregate-to-view: "true" name: tekton-triggers-aggregate-view rules: - apiGroups: - triggers.tekton.dev resources: - clustertriggerbindings - clusterinterceptors - eventlisteners - interceptors - triggers - triggerbindings - triggertemplates verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors rules: - apiGroups: - "" resources: - secrets verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors-secrets rules: - apiGroups: - triggers.tekton.dev resources: - clusterinterceptors verbs: - get - list - watch - update - apiGroups: - "" resourceNames: - tekton-triggers-core-interceptors-certs resources: - secrets verbs: - get - list - watch - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-eventlistener-clusterroles rules: - apiGroups: - triggers.tekton.dev resources: - clustertriggerbindings - clusterinterceptors verbs: - get - list - watch - apiGroups: - "" resources: - secrets verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-eventlistener-roles rules: - apiGroups: - triggers.tekton.dev resources: - eventlisteners - triggerbindings - interceptors - triggertemplates - triggers verbs: - get - list - watch - apiGroups: - "" resources: - configmaps verbs: - get - list - watch - apiGroups: - tekton.dev resources: - pipelineruns - pipelineresources - taskruns verbs: - create - apiGroups: - "" resources: - serviceaccounts verbs: - impersonate - apiGroups: - "" resources: - events verbs: - create - patch --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-resolvers-namespace-rbac namespace: tekton-pipelines-resolvers roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-resolvers-namespace-rbac subjects: - kind: ServiceAccount name: tekton-pipelines-resolvers namespace: tekton-pipelines-resolvers --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: tekton-dashboard-info namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-dashboard-info subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:authenticated --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-events-controller-leaderelection namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-leader-election subjects: - kind: ServiceAccount name: tekton-events-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-controller subjects: - kind: ServiceAccount name: tekton-pipelines-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller-leaderelection namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-leader-election subjects: - kind: ServiceAccount name: tekton-pipelines-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-events-controller namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-events-controller subjects: - kind: ServiceAccount name: tekton-events-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-info namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-info subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:authenticated --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-webhook subjects: - kind: ServiceAccount name: tekton-pipelines-webhook namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook-leaderelection namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-pipelines-leader-election subjects: - kind: ServiceAccount name: tekton-pipelines-webhook namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-triggers-core-interceptors subjects: - kind: ServiceAccount name: tekton-triggers-core-interceptors namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-info namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-triggers-info subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:authenticated --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-webhook-admin namespace: tekton-pipelines roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: tekton-triggers-admin-webhook subjects: - kind: ServiceAccount name: tekton-triggers-webhook namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard rbac.dashboard.tekton.dev/subject: tekton-dashboard name: tekton-dashboard-backend roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-dashboard-backend subjects: - kind: ServiceAccount name: tekton-dashboard namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: tekton-dashboard-cronjobs-extension roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-dashboard-cronjobs-extension subjects: - kind: ServiceAccount name: tekton-dashboard namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: dashboard app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard rbac.dashboard.tekton.dev/subject: tekton-dashboard name: tekton-dashboard-tenant roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-dashboard-tenant subjects: - kind: ServiceAccount name: tekton-dashboard namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: events app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-events-controller-cluster-access roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-events-controller-cluster-access subjects: - kind: ServiceAccount name: tekton-events-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller-cluster-access roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-pipelines-controller-cluster-access subjects: - kind: ServiceAccount name: tekton-pipelines-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: controller app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-controller-tenant-access roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-pipelines-controller-tenant-access subjects: - kind: ServiceAccount name: tekton-pipelines-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-resolvers roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-pipelines-resolvers-resolution-request-updates subjects: - kind: ServiceAccount name: tekton-pipelines-resolvers namespace: tekton-pipelines-resolvers --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: tekton-pipelines-webhook-cluster-access roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-pipelines-webhook-cluster-access subjects: - kind: ServiceAccount name: tekton-pipelines-webhook namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-controller-admin roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-triggers-admin subjects: - kind: ServiceAccount name: tekton-triggers-controller namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-triggers-core-interceptors subjects: - kind: ServiceAccount name: tekton-triggers-core-interceptors namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-core-interceptors-secrets roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-triggers-core-interceptors-secrets subjects: - kind: ServiceAccount name: tekton-triggers-core-interceptors namespace: tekton-pipelines --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: tekton-triggers-webhook-admin roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: tekton-triggers-admin subjects: - kind: ServiceAccount name: tekton-triggers-webhook namespace: tekton-pipelines --- apiVersion: v1 data: default-kind: task kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: bundleresolver-config namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: allowed-namespaces: "" blocked-namespaces: "" default-kind: task default-namespace: "" kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: cluster-resolver-config namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-leader-election-resolvers namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: loglevel.controller: info loglevel.webhook: info zap-logger-config: | { "level": "info", "development": false, "sampling": { "initial": 100, "thereafter": 100 }, "outputPaths": ["stdout"], "errorOutputPaths": ["stderr"], "encoding": "json", "encoderConfig": { "timeKey": "timestamp", "levelKey": "severity", "nameKey": "logger", "callerKey": "caller", "messageKey": "message", "stacktraceKey": "stacktrace", "lineEnding": "", "levelEncoder": "", "timeEncoder": "iso8601", "durationEncoder": "", "callerEncoder": "" } } kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-logging namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # metrics.backend-destination field specifies the system metrics destination. # It supports either prometheus (the default) or stackdriver. # Note: Using stackdriver will incur additional charges metrics.backend-destination: prometheus # metrics.request-metrics-backend-destination specifies the request metrics # destination. If non-empty, it enables queue proxy to send request metrics. # Currently supported values: prometheus, stackdriver. metrics.request-metrics-backend-destination: prometheus # metrics.stackdriver-project-id field specifies the stackdriver project ID. This # field is optional. When running on GCE, application default credentials will be # used if this field is not provided. metrics.stackdriver-project-id: "" # metrics.allow-stackdriver-custom-metrics indicates whether it is allowed to send metrics to # Stackdriver using "global" resource type and custom metric type if the # metrics are not supported by "knative_revision" resource type. Setting this # flag to "true" could cause extra Stackdriver charge. # If metrics.backend-destination is not Stackdriver, this is ignored. metrics.allow-stackdriver-custom-metrics: "false" kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-observability namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: api-token-secret-key: "" api-token-secret-name: "" api-token-secret-namespace: default default-org: "" default-revision: main default-url: https://github.com/tektoncd/catalog.git fetch-timeout: 1m scm-type: github server-url: "" kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: git-resolver-config namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: fetch-timeout: 1m kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: http-resolver-config namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: default-artifact-hub-pipeline-catalog: tekton-catalog-pipelines default-artifact-hub-task-catalog: tekton-catalog-tasks default-kind: task default-tekton-hub-catalog: Tekton default-type: artifact kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: hubresolver-config namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: enable-bundles-resolver: "true" enable-cluster-resolver: "true" enable-git-resolver: "true" enable-hub-resolver: "true" kind: ConfigMap metadata: labels: app.kubernetes.io/component: resolvers app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: resolvers-feature-flags namespace: tekton-pipelines-resolvers --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # default-timeout-minutes contains the default number of # minutes to use for TaskRun and PipelineRun, if none is specified. default-timeout-minutes: "60" # 60 minutes # default-service-account contains the default service account name # to use for TaskRun and PipelineRun, if none is specified. default-service-account: "default" # default-managed-by-label-value contains the default value given to the # "app.kubernetes.io/managed-by" label applied to all Pods created for # TaskRuns. If a user's requested TaskRun specifies another value for this # label, the user's request supercedes. default-managed-by-label-value: "tekton-pipelines" # default-pod-template contains the default pod template to use for # TaskRun and PipelineRun. If a pod template is specified on the # PipelineRun, the default-pod-template is merged with that one. # default-pod-template: # default-affinity-assistant-pod-template contains the default pod template # to use for affinity assistant pods. If a pod template is specified on the # PipelineRun, the default-affinity-assistant-pod-template is merged with # that one. # default-affinity-assistant-pod-template: # default-cloud-events-sink contains the default CloudEvents sink to be # used for TaskRun and PipelineRun, when no sink is specified. # Note that right now it is still not possible to set a PipelineRun or # TaskRun specific sink, so the default is the only option available. # If no sink is specified, no CloudEvent is generated # default-cloud-events-sink: # default-task-run-workspace-binding contains the default workspace # configuration provided for any Workspaces that a Task declares # but that a TaskRun does not explicitly provide. # default-task-run-workspace-binding: | # emptyDir: {} # default-max-matrix-combinations-count contains the default maximum number # of combinations from a Matrix, if none is specified. default-max-matrix-combinations-count: "256" # default-forbidden-env contains comma seperated environment variables that cannot be # overridden by podTemplate. default-forbidden-env: # default-resolver-type contains the default resolver type to be used in the cluster, # no default-resolver-type is specified by default default-resolver-type: # default-imagepullbackoff-timeout contains the default duration to wait # before requeuing the TaskRun to retry, specifying 0 here is equivalent to fail fast # possible values could be 1m, 5m, 10s, 1h, etc # default-imagepullbackoff-timeout: "5m" # default-container-resource-requirements allow users to update default resource requirements # to a init-containers and containers of a pods create by the controller # Onet: All the resource requirements are applied to init-containers and containers # only if the existing resource requirements are empty. # default-container-resource-requirements: | # place-scripts: # updates resource requirements of a 'place-scripts' container # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "128Mi" # cpu: "500m" # # prepare: # updates resource requirements of a 'prepare' container # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "256Mi" # cpu: "500m" # # working-dir-initializer: # updates resource requirements of a 'working-dir-initializer' container # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "512Mi" # cpu: "500m" # # prefix-scripts: # updates resource requirements of containers which starts with 'scripts-' # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "128Mi" # cpu: "500m" # # prefix-sidecar-scripts: # updates resource requirements of containers which starts with 'sidecar-scripts-' # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "128Mi" # cpu: "500m" # # default: # updates resource requirements of init-containers and containers which has empty resource resource requirements # requests: # memory: "64Mi" # cpu: "250m" # limits: # memory: "256Mi" # cpu: "500m" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-defaults namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # default-service-account contains the default service account name # to use for TaskRun and PipelineRun, if none is specified. default-service-account: "default" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: config-defaults-triggers namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # formats contains a comma seperated list of event formats to be used # the only format supported today is "tektonv1". An empty string is not # a valid configuration. To disable events, do not specify the sink. formats: "tektonv1" # sink contains the event sink to be used for TaskRun, PipelineRun and # CustomRun. If no sink is specified, no CloudEvent is generated. # This setting supercedes the "default-cloud-events-sink" from the # "config-defaults" config map sink: "https://events.sink/cdevents" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-events namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-leader-election-controller namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-leader-election-events namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: config-leader-election-triggers-controller namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: config-leader-election-triggers-webhook namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # lease-duration is how long non-leaders will wait to try to acquire the # lock; 15 seconds is the value used by core kubernetes controllers. lease-duration: "60s" # renew-deadline is how long a leader will try to renew the lease before # giving up; 10 seconds is the value used by core kubernetes controllers. renew-deadline: "40s" # retry-period is how long the leader election client waits between tries of # actions; 2 seconds is the value used by core kubernetes controllers. retry-period: "10s" # buckets is the number of buckets used to partition key space of each # Reconciler. If this number is M and the replica number of the controller # is N, the N replicas will compete for the M buckets. The owner of a # bucket will take care of the reconciling for the keys partitioned into # that bucket. buckets: "1" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-leader-election-webhook namespace: tekton-pipelines --- apiVersion: v1 data: loglevel.controller: info loglevel.webhook: info zap-logger-config: | { "level": "info", "development": false, "sampling": { "initial": 100, "thereafter": 100 }, "outputPaths": ["stdout"], "errorOutputPaths": ["stderr"], "encoding": "json", "encoderConfig": { "timeKey": "timestamp", "levelKey": "severity", "nameKey": "logger", "callerKey": "caller", "messageKey": "message", "stacktraceKey": "stacktrace", "lineEnding": "", "levelEncoder": "", "timeEncoder": "iso8601", "durationEncoder": "", "callerEncoder": "" } } kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-logging namespace: tekton-pipelines --- apiVersion: v1 data: loglevel.controller: info loglevel.eventlistener: info loglevel.webhook: info zap-logger-config: | { "level": "info", "development": false, "disableStacktrace": true, "sampling": { "initial": 100, "thereafter": 100 }, "outputPaths": ["stdout"], "errorOutputPaths": ["stderr"], "encoding": "json", "encoderConfig": { "timeKey": "timestamp", "levelKey": "severity", "nameKey": "logger", "callerKey": "caller", "messageKey": "message", "stacktraceKey": "stacktrace", "lineEnding": "", "levelEncoder": "", "timeEncoder": "iso8601", "durationEncoder": "", "callerEncoder": "" } } kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: config-logging-triggers namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # metrics.backend-destination field specifies the system metrics destination. # It supports either prometheus (the default) or stackdriver. # Note: Using Stackdriver will incur additional charges. metrics.backend-destination: prometheus # metrics.stackdriver-project-id field specifies the Stackdriver project ID. This # field is optional. When running on GCE, application default credentials will be # used and metrics will be sent to the cluster's project if this field is # not provided. metrics.stackdriver-project-id: "" # metrics.allow-stackdriver-custom-metrics indicates whether it is allowed # to send metrics to Stackdriver using "global" resource type and custom # metric type. Setting this flag to "true" could cause extra Stackdriver # charge. If metrics.backend-destination is not Stackdriver, this is # ignored. metrics.allow-stackdriver-custom-metrics: "false" metrics.taskrun.level: "task" metrics.taskrun.duration-type: "histogram" metrics.pipelinerun.level: "pipeline" metrics.pipelinerun.duration-type: "histogram" metrics.count.enable-reason: "false" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-observability namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # metrics.backend-destination field specifies the system metrics destination. # It supports either prometheus (the default) or stackdriver. # Note: Using stackdriver will incur additional charges metrics.backend-destination: prometheus # metrics.stackdriver-project-id field specifies the stackdriver project ID. This # field is optional. When running on GCE, application default credentials will be # used if this field is not provided. metrics.stackdriver-project-id: "" # metrics.allow-stackdriver-custom-metrics indicates whether it is allowed to send metrics to # Stackdriver using "global" resource type and custom metric type if the # metrics are not supported by "knative_revision" resource type. Setting this # flag to "true" could cause extra Stackdriver charge. # If metrics.backend-destination is not Stackdriver, this is ignored. metrics.allow-stackdriver-custom-metrics: "false" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: config-observability-triggers namespace: tekton-pipelines --- apiVersion: v1 kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-registry-cert namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # # spire-trust-domain specifies the SPIRE trust domain to use. # spire-trust-domain: "example.org" # # spire-socket-path specifies the SPIRE agent socket for SPIFFE workload API. # spire-socket-path: "unix:///spiffe-workload-api/spire-agent.sock" # # spire-server-addr specifies the SPIRE server address for workload/node registration. # spire-server-addr: "spire-server.spire.svc.cluster.local:8081" # # spire-node-alias-prefix specifies the SPIRE node alias prefix to use. # spire-node-alias-prefix: "/tekton-node/" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-spire namespace: tekton-pipelines --- apiVersion: v1 data: _example: | ################################ # # # EXAMPLE CONFIGURATION # # # ################################ # This block is not actually functional configuration, # but serves to illustrate the available configuration # options and document them in a way that is accessible # to users that `kubectl edit` this config map. # # These sample configuration options may be copied out of # this example block and unindented to be in the data block # to actually change the configuration. # # Enable sending traces to defined endpoint by setting this to true enabled: "true" # # API endpoint to send the traces to # (optional): The default value is given below endpoint: "http://jaeger-collector.jaeger.svc.cluster.local:14268/api/traces" # (optional) Name of the k8s secret which contains basic auth credentials credentialsSecret: "jaeger-creds" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: config-tracing namespace: tekton-pipelines --- apiVersion: v1 data: version: v0.44.0 kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-dashboard name: dashboard-info namespace: tekton-pipelines --- apiVersion: v1 data: await-sidecar-readiness: "true" coschedule: workspaces disable-affinity-assistant: "false" disable-creds-init: "false" enable-api-fields: beta enable-cel-in-whenexpression: "false" enable-param-enum: "false" enable-provenance-in-status: "true" enable-step-actions: "false" enable-tekton-oci-bundles: "false" enforce-nonfalsifiability: none keep-pod-on-cancel: "false" require-git-ssh-secret-known-hosts: "false" results-from: termination-message running-in-environment-with-injected-sidecars: "true" send-cloudevents-for-runs: "false" set-security-context: "false" trusted-resources-verification-no-match-policy: ignore kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: feature-flags namespace: tekton-pipelines --- apiVersion: v1 data: enable-api-fields: stable labels-exclusion-pattern: "" kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: feature-flags-triggers namespace: tekton-pipelines --- apiVersion: v1 data: version: v0.57.0 kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines name: pipelines-info namespace: tekton-pipelines --- apiVersion: v1 data: version: v0.26.1 kind: ConfigMap metadata: labels: app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers name: triggers-info namespace: tekton-pipelines --- apiVersion: v1 kind: Secret metadata: labels: app.kubernetes.io/component: interceptors app.kubernetes.io/instance: default app.kubernetes.io/name: core-interceptors app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 name: tekton-triggers-core-interceptors-certs namespace: tekton-pipelines --- apiVersion: v1 kind: Secret metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-triggers triggers.tekton.dev/release: v0.26.1 name: triggers-webhook-certs namespace: tekton-pipelines --- apiVersion: v1 kind: Secret metadata: labels: app.kubernetes.io/component: webhook app.kubernetes.io/instance: default app.kubernetes.io/part-of: tekton-pipelines pipeline.tekton.dev/release: v0.57.0 name: webhook-certs namespace: tekton-pipelines