allow read-only access to our pipeline

[dustymabe]

trafficstars

Right now if we want to give someone access to the pipeline we have to add them to the openshift project.

It would be nice if there was a way to give someone access without giving them write access or access to our kubernetes secrets.

@jlebon found a few links that might be useful:

• according to https://github.com/jenkinsci/openshift-login-plugin#openshift-role-to-jenkins-permission-mapping, the openshift view role maps to read-only in jenkins
• https://github.com/jenkinsci/openshift-login-plugin#using-custom-roles

[jlebon]

Related: https://github.com/coreos/fedora-coreos-pipeline/issues/7

[prestist]

We should group #7 && #41 with this to create a single issue. Which creates the goal to allow outside contributors access to debugging.