Pipeline Security, Rights and Service Accounts

[DerekRoberts]

Describe the task
The pipeline, particularly Jenkins, is run by security accounts with admin access. This is fine initially, but must be scaled to back to reduce vectors for attack and the impact of any attacks that do occur.

Acceptance Criteria

• Assess current GitHub and OpenShift accounts and rights
• Reduce rights of existing accounts and services
• Remove users no longer requiring rights
• Remove stale service accounts
• Assign more accounts less rights, but over more tasks
• Reduce frequency of admin-level rights, even for team members
• General security assessment

[DerekRoberts]

Critical, but not urgent.