Skip to content

rbac: remove create/delete/patch from tools for bulids

David Caro requested to merge tekton_only_read into main

This forces every tool to manage builds only through the API, instead of being able to act on them directly on k8s.

This removes the need for an admission controller as the API becomes the single point of entry for users.

Bug: T360329 Signed-off-by: David Caro dcaro@wikimedia.org

Edited by David Caro

Merge request reports