1. Proposed title of this feature request
Flexible service account binding for Quay Robot credentials in OpenShift Pipelines

2. What is the nature and description of the request?
In CI/CD setups using OpenShift Pipelines, the pipeline ServiceAccount is the default SA used by PipelineRuns.

Quay Bridge Operator currently only configures the builder SA to push images to quay, which is primarily used by BuildConfig/S2I, not Tekton.

This forces users to either:

• Rebind secrets manually.
• Grant high-permission SCCs to builder, which may not be desirable.

Suggested Enhancements (by the customer)

• New ConfigMap/CR parameter to set the SA name (quay.targetServiceAccount: pipeline).
• Auto-bind Quay robot secret to that SA in the target namespace.
• Optionally generate imagePullSecrets or mount options.

3. List any affected packages or components.

• OpenShift Quay Bridge Operator
• OpenShift Pipelines