add permissions

build.yaml

@@ -2,9 +2,9 @@ apiVersion: kpack.io/v1alpha2
 kind: Build
 metadata:
   name: sample3
-  kubero.dev/app: example
-  kubero.dev/phase: dev
-  kubero.dev/pipeline: pipelinename
+  #kubero.dev/app: example
+  #kubero.dev/phase: dev
+  #kubero.dev/pipeline: pipelinename
 spec:
   tags:
   - registry.kubero.linode.shoks.ch/kapck/example:latest

secrets.example.yaml

@@ -29,4 +29,24 @@ secrets:
   - name: git-ssh-auth
 imagePullSecrets:
   - name: registry-user-pass
----
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: kpack-role
+rules:
+  - apiGroups: ["kpack.io"]
+    resources: ["builds", "images"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: kpack-role-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: kpack-role
+subjects:
+  - kind: ServiceAccount
+    name: kpack-sa