fix: adding rbac needed to run tests (#7318)

Author: tisutisu

components/konflux-ci/base/kustomization.yaml

@@ -6,6 +6,8 @@ resources:
 - appstudio-pipelines-runner-rolebinding.yaml
 - pod-logs-reader-role.yaml
 - pod-logs-reader-rolebinding.yaml
+- test-runner-cluster-role.yaml
+- test-runner-rolebinding.yaml
 
 # Skip applying the Tekton/PaC operands while the Tekton/PaC operator is being installed.
 # See more information about this option, here: 

components/konflux-ci/base/test-runner-cluster-role.yaml

@@ -0,0 +1,8 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: test-runner
+rules:
+- apiGroups: ["appstudio.redhat.com"]
+  resources: ["imagerepositories"]
+  verbs: ["get", "list", "watch"]

components/konflux-ci/base/test-runner-rolebinding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: test-runner-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: test-runner
+subjects:
+- kind: ServiceAccount
+  name: appstudio-pipeline
+  namespace: konflux-ci