gitlab-role.yaml

apiVersion: v1
kind: Secret
metadata:
    name: gitlab-runner-secret
    namespace: gitlab-managed-apps
type: Opaque
data:
    runner-registration-token: 'token here' #base64 encoded registration token
    runner-token: ''
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    namespace: gitlab-managed-apps
    name: default-account-role
rules:
    - apiGroups: ['*']
      resources: ['*']
      verbs: ['get', 'list', 'watch', 'create', 'update', 'patch', 'delete']
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: default-account-binding
    namespace: gitlab-managed-apps
subjects:
    - kind: ServiceAccount
      name: default
      namespace: gitlab-managed-apps
roleRef:
    kind: Role
    name: default-account-role
    apiGroup: rbac.authorization.k8s.io