Proposed title of this feature request

Allow Kubernetes namespace users setup CLF without creating cluster-level resources 

What is the nature and description of the request?

Currently multi clf feature (clf for each namespace ) doesnot allow normal users or namespace admins to collect the logs .currently rbac needs access to apiserver while providing write and read access to service account . This cannot be done without  cluster level privilege. 

Requesting to allow Kubernetes namespace users or Non cluster-admins or namespace admins to setup CLF without creating cluster-level resources like cluster role bindings .

Why does the customer need this? (List the business requirements)

Separation of duties in cluster management.

System administrators, are not particularly interested in logging of applications hosted and developers teams can manage project level logs.