Drop cluster-admin for eventing controller

[mattmoor]

This is configured here.

In Serving we create a custom role here.

cc @vaikas-google

[evankanderson]

From #113 :

Don't give a cluster-admin to binder service account. The README mentions that you shouldn't run in prod, but as pointed out by @scothis , there are people who will not read that :) So, as a follow on PR, we should tighten up the permissions that we use in our examples to be bare minimum.

[evankanderson]

This is a dup of #749

[evankanderson]

/close

[knative-prow-robot]

@evankanderson: Closing this issue.

Details

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.