Describe the bug
The Eventing Source Controller uses the same ServiceAccount, eventing-controller, as the core Eventing Controller. According to Eventing's Service Account docs, they must be different.
Expected behavior
The Eventing Controller and the Eventing Sources Controller should use different Kubernetes ServiceAccounts, so that they can each be given minimal RBAC permissions, rather than the union of permissions needed for both.
Describe the bug
The Eventing Source Controller uses the same ServiceAccount,
eventing-controller, as the core Eventing Controller. According to Eventing's Service Account docs, they must be different.Expected behavior
The Eventing Controller and the Eventing Sources Controller should use different Kubernetes ServiceAccounts, so that they can each be given minimal RBAC permissions, rather than the union of permissions needed for both.