apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: tekton-runner
  namespace: cicd

rules:
  - apiGroups: ["tekton.dev"]
    resources:
      - pipelineruns
      - taskruns
    verbs:
      - get
      - list
      - watch
      - create
      - delete

  - apiGroups: [""]
    resources:
      - pods
      - pods/log
    verbs:
      - get
      - list
      - watch

  - apiGroups: [""]
    resources:
      - configmaps
    verbs:
      - get
      - list
      - watch