From db3f31b5815146db3ce81d3e291033abfba40073 Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Sun, 13 Sep 2026 22:11:28 +0900
Subject: [PATCH] Revert "feat: add CI ServiceAccount + RBAC for Tekton
 PipelineRun access"

This reverts commit a8e8d33a2854dc3540bd63a61bdc6e80d3927c96.
---
 k8s/tekton/ci-rbac.yaml       | 51 -----------------------------------
 k8s/tekton/kustomization.yaml |  1 -
 2 files changed, 52 deletions(-)
 delete mode 100644 k8s/tekton/ci-rbac.yaml

diff --git a/k8s/tekton/ci-rbac.yaml b/k8s/tekton/ci-rbac.yaml
deleted file mode 100644
index 81ca0de..0000000
--- a/k8s/tekton/ci-rbac.yaml
+++ /dev/null
@@ -1,51 +0,0 @@
-# ServiceAccount and RBAC for CI runner to create/watch Tekton PipelineRuns.
-# Applied to the `api` namespace where PipelineRuns execute.
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: ci-tekton-trigger
-  namespace: api
-  labels:
-    app: api-gateway
-    component: ci
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: ci-tekton-trigger
-  namespace: api
-rules:
-- apiGroups: ["tekton.dev"]
-  resources: ["pipelineruns"]
-  verbs: ["create", "get", "list", "watch", "delete"]
-- apiGroups: ["tekton.dev"]
-  resources: ["taskruns"]
-  verbs: ["get", "list"]
-- apiGroups: [""]
-  resources: ["pods", "pods/log"]
-  verbs: ["get", "list"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: ci-tekton-trigger
-  namespace: api
-subjects:
-- kind: ServiceAccount
-  name: ci-tekton-trigger
-  namespace: api
-roleRef:
-  kind: Role
-  name: ci-tekton-trigger
-  apiGroup: rbac.authorization.k8s.io
----
-# Secret to generate a long-lived token for the CI runner.
-# The runner mounts this as KUBECONFIG_B64 or uses it directly.
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ci-tekton-trigger-token
-  namespace: api
-  annotations:
-    kubernetes.io/service-account.name: ci-tekton-trigger
-type: kubernetes.io/service-account-token
diff --git a/k8s/tekton/kustomization.yaml b/k8s/tekton/kustomization.yaml
index 917e24c..fefd3fd 100644
--- a/k8s/tekton/kustomization.yaml
+++ b/k8s/tekton/kustomization.yaml
@@ -4,7 +4,6 @@ kind: Kustomization
 namespace: api
 
 resources:
-- ci-rbac.yaml
 - task-integration-test.yaml
 - pipeline-integration-test.yaml