Don't use logged user when command creating a project are used

[cmoulliard]

When we create by example the infra project, our oc command is executed using the current logged user which has perhaps or not the appropriate role to create a project, configMap, serviceaccount ....

Nevertheless, if the role linked to the user is the one used, that means that he/she will be able to manage the content of the infra project. This is not an use for the admin user which is cluster wised but this is a problem for demo's users (user1, user2, ....)

To secure our platform in that case, the following parameter should be passed to the oc command when a resource is created/deleted or edited

oc --config={{ openshift.common.config_base }}/admin.kubeconfig 

where {{ openshift.common.config_base }} could be : /etc/origin/master

If we create the 'infra' project as such

- name: Create project
  command: oc --config=/etc/origin/master/admin.kubeconfig new-project {{ infra_project }}

then the user can't access content of infra folder