apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: pipeline-runner
subjects:
# temporarily switched to kf-user, because pipeline-runner isn't bound to workload identity by default
- kind: ServiceAccount
  name: kf-user
  namespace: kubeflow
