okd/roles/openshift_logging/tasks/generate_rolebindings.yaml

---
- name: Generate RoleBindings
  template: src=rolebinding.j2 dest={{mktemp.stdout}}/templates/logging-{{obj_name}}-rolebinding.yaml
  vars:
    obj_name: logging-elasticsearch-view-role
    roleRef:
      name: view
    subjects:
      - kind: ServiceAccount
        name: aggregated-logging-elasticsearch
  check_mode: no
  changed_when: no