Add role binding to the template definition

[simonpasquier]

This avoids invoking the 'oc adm' CLI although it requires to pass the
current namespace as a parameter when launching the app.

Not sure if you think it is a improvement, feel free to merge or reject ;-)

[jotak]

I like it, it's definitely faster 👍
I just wonder if it's possible to use the downward API at this position, to make it even better? I know about metadata.namespace that we can interpolate in container arguments, but not sure if we can do it in role bindings.

[simonpasquier]

Unfortunately this isn't possible, see openshift/origin#8971 (comment).

[jotak]

Thanks @simonpasquier !