---
"kind": "ServiceAccount"
"apiVersion": "v1"
"metadata":
  "name": "promtail"
  "namespace": "kube-mon"
---
"kind": "ClusterRole"
"apiVersion": "rbac.authorization.k8s.io/v1"
"metadata":
  "name": "promtail"
"rules":
  -
    "verbs":
      - "get"
      - "list"
      - "watch"
    "apiGroups":
      - ""
    "resources":
      - "nodes"
      - "nodes/proxy"
      - "services"
      - "endpoints"
      - "pods"
---
"kind": "ClusterRoleBinding"
"apiVersion": "rbac.authorization.k8s.io/v1"
"metadata":
  "name": "promtail"
"subjects":
  -
    "kind": "ServiceAccount"
    "name": "promtail"
    "namespace": "kube-mon"
"roleRef":
  "apiGroup": "rbac.authorization.k8s.io"
  "kind": "ClusterRole"
  "name": "promtail"