---
- name: Generate ClusterRole for cluster-reader
  template: src=clusterrole.j2 dest={{mktemp.stdout}}/templates/logging-10-{{obj_name}}-clusterrole.yaml
  vars:
    obj_name: rolebinding-reader
    rules:
      - resources: [clusterrolebindings]
        verbs:
          - get
  check_mode: no