Add service-account to be used during a TaskRun.

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
+  - ./service-account.yaml
   - ./task-postgresql-pod.yaml
 
 configMapGenerator:

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: task-postgresql-pod-sa
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: task-postgresql-pod-sa
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - services
+  verbs:
+  - create
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: task-postgresql-pod-sa
+subjects:
+  - kind: ServiceAccount
+    name: task-postgresql-pod-sa
+roleRef:
+  kind: Role
+  name: task-postgresql-pod-sa
+  apiGroup: rbac.authorization.k8s.io
+---
+