# See: https://discuss.elastic.co/t/filebeat-logs-unauthorized-when-addressing-old-namespaces/243220/3
kind: Secret
apiVersion: v1
metadata:
  name: tavros-beats-role-override
  namespace: elastic-system
stringData:
  roles.yml: |-
    eck_beat_es_filebeat_role_v77:
      cluster:
      - monitor
      - manage_ilm
      - manage_ml
      - read_ilm
      - cluster:admin/ingest/pipeline/get
      indices:
      - names:
        - filebeat-*
        - logs-*
        privileges:
        - manage
        - read
        - create_doc
        - view_index_metadata
        - create_index
      applications: []
    eck_beat_es_metricbeat_role_v77:
      cluster:
      - monitor
      - manage_ilm
      - manage_ml
      - read_ilm
      - cluster:admin/ingest/pipeline/get
      indices:
      - names:
        - metricbeat-*
        - metrics-*
        privileges:
        - manage
        - read
        - create_doc
        - view_index_metadata
        - create_index
      applications: []
