fix: isolate PaC execution service account

This commit is contained in:
root
2026-07-13 08:12:47 +02:00
parent 62725b01f5
commit 17465802c8
+2 -2
View File
@@ -10,7 +10,7 @@ metadata:
pipelinesascode.tekton.dev/max-keep-runs: "8" pipelinesascode.tekton.dev/max-keep-runs: "8"
unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01 unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01
unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery" unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery"
unidesk.ai/effective-config-sha256: sha256:335c9e900a9b11998b8881e08ab36b89dce9c8c62397b5317ba3e9399f985336 unidesk.ai/effective-config-sha256: sha256:e4d95e74410816956a8f848eb379bf73d26bab130db498fd69a442c0a1725e5d
unidesk.ai/source-artifact-renderer: sub2rank-platform-service unidesk.ai/source-artifact-renderer: sub2rank-platform-service
unidesk.ai/source-artifact-mode: embedded-pipeline-spec unidesk.ai/source-artifact-mode: embedded-pipeline-spec
labels: labels:
@@ -419,7 +419,7 @@ spec:
- name: manifest-template-b64 - name: manifest-template-b64
value: $(params.manifest-template-b64) value: $(params.manifest-template-b64)
taskRunTemplate: taskRunTemplate:
serviceAccountName: default serviceAccountName: sub2rank-nc01-tekton-runner
podTemplate: podTemplate:
hostNetwork: true hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet dnsPolicy: ClusterFirstWithHostNet