apiVersion: v1 kind: ServiceAccount metadata: name: builder-service-account namespace: gitea --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: builder-rolebinding namespace: target roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: edit subjects: - namespace: gitea kind: ServiceAccount name: builder-service-account --- apiVersion: v1 kind: Secret metadata: name: builder-service-account-secret annotations: kubernetes.io/service-account.name: builder-service-account type: kubernetes.io/service-account-token