Instead of proposing a `cluster-admin` Role, specify the requirements of the RoleBinding for the ServiceAccount used to deploy the Tekton resources.