Role and RoleBinding for OpenShift (and Kubernetes) to get the pods and logs ONLY

openshift-role4logs-only.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: logging-user:list-and-logs
  namespace: YOUR-NAMESPACE
rules:
  - apiGroups:
      - ''
    resources:
      - pods
      - pods/log
    verbs:
      - get
      - watch
      - list
  - verbs:
      - get
    apiGroups:
      - ''
    resources:
      - namespaces
  - verbs:
      - get
    apiGroups:
      - ''
      - project.openshift.io
    resources:
      - projects
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: 'logging-user:logs'
  namespace: YOUR-NAMESPACE
subjects:
  - kind: User
    apiGroup: rbac.authorization.k8s.io
    name: logging-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: 'logging-user:list-and-logs'