Set service account token location

okd-project · Jan 18, 2025 · 66ab854 · 66ab854
1 parent 7ce0b88
commit 66ab854
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
@@ -26,11 +26,15 @@ quarkus.kubernetes.pvc-volumes."storage".claim-name=operator-build-controller
 quarkus.kubernetes.mounts."storage".path=/opt/okd/recipes
 
 quarkus.kubernetes.env.vars."BUILD_BRANCH"=build-controller
+quarkus.kubernetes.env.vars."XDG_CONFIG_HOME"=/tmp
 
 # Generate Role resource with name "operator-builder"
-quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.0.api-groups=extensions,apps,tekton.dev,""
-quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.0.resources=configmaps,pipelineruns,persistentvolumeclaims
+quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.0.api-groups=tekton.dev
+quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.0.resources=pipelineruns
 quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.0.verbs=get,watch,list,create,patch,update,delete
+quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.1.api-groups=
+quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.1.resources=configmaps,persistentvolumeclaims
+quarkus.kubernetes.rbac.roles."operator-builder".policy-rules.1.verbs=get,watch,list,create,patch,update,delete
 
 # Generate ServiceAccount
 quarkus.kubernetes.rbac.service-accounts."operator-build-controller".namespace=okd-operator-build