From 17465802c87e38bfde19578f41e21fcabf20045e Mon Sep 17 00:00:00 2001 From: root Date: Mon, 13 Jul 2026 08:12:47 +0200 Subject: [PATCH] fix: isolate PaC execution service account --- .tekton/sub2rank-nc01-pac.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/sub2rank-nc01-pac.yaml b/.tekton/sub2rank-nc01-pac.yaml index 39f044d..8c87aac 100644 --- a/.tekton/sub2rank-nc01-pac.yaml +++ b/.tekton/sub2rank-nc01-pac.yaml @@ -10,7 +10,7 @@ metadata: pipelinesascode.tekton.dev/max-keep-runs: "8" unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01 unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery" - unidesk.ai/effective-config-sha256: sha256:335c9e900a9b11998b8881e08ab36b89dce9c8c62397b5317ba3e9399f985336 + unidesk.ai/effective-config-sha256: sha256:e4d95e74410816956a8f848eb379bf73d26bab130db498fd69a442c0a1725e5d unidesk.ai/source-artifact-renderer: sub2rank-platform-service unidesk.ai/source-artifact-mode: embedded-pipeline-spec labels: @@ -419,7 +419,7 @@ spec: - name: manifest-template-b64 value: $(params.manifest-template-b64) taskRunTemplate: - serviceAccountName: default + serviceAccountName: sub2rank-nc01-tekton-runner podTemplate: hostNetwork: true dnsPolicy: ClusterFirstWithHostNet