Merge pull request #308 from bnshr/nerc-operations-124

Allow role based access control to Loki logs

logging/base/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
   - clusterloggings
   - clusterlogforwarders
   - externalsecrets
+  - rolebindings
 commonLabels:
   app.kubernetes.io/name: logging
   app.kubernetes.io/component: logging

logging/base/rolebindings/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - rolebinding.yaml

logging/base/rolebindings/rolebinding.yaml

@@ -0,0 +1,13 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: log-collector-privileged-binding-nerc-logs-metrics
+  namespace: openshift-logging
+subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: nerc-logs-metrics
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: log-collector-privileged