Updating logic to be based on settings rather than being hardcoded fo…

[ewolinetz]

…r quicker future integration with external services

To keep previous configurations, add the following to elasticsearch.yml:

openshift:
  acl:
    users:
      names: ["system.logging.fluentd", "system.logging.kibana", "system.logging.curator"]
      system.logging.fluentd:
        execute: ["actionrequestfilter.fluentd"]
        actionrequestfilter.fluentd.comment: "Fluentd can only write"
      system.logging.kibana:
        bypass: ["*"]
        execute: ["actionrequestfilter.kibana"]
        actionrequestfilter.kibana.comment: "Kibana can only read from every other index"
      system.logging.kibana.*.comment: "Kibana can do anything in the kibana index"
      system.logging.kibana.*.indices: [".kibana.*"]
      system.logging.curator:
        execute: ["actionrequestfilter.curator"]
        actionrequestfilter.curator.comment: "Curator can list all indices and delete them"

@jcantrill @jimmidyson PTAL

[fusesource-ci]

License check failed: run mvn -N license:format to update all licenses, commit, squash & force push please.

[ewolinetz]

@jcantrill test created... where did you want documentation regarding the settings captured?

[jcantrill]

@ewolinetz probably in a README in this repo, probably in the deployment docs someplace, also in the origin docs if it makes sense, not sure how detailed the origin docs get.

[ewolinetz]

@jcantrill PTAL, will update origin-aggregated-logging docs when we update to use this.

Will also clean up commented out code blocks and squash if no other comments.

[jcantrill]

LGTM

[ewolinetz]

[merge]