Turns out that namespace-local roles are broken pre openshift 3.6

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

roles/openshift/object/tasks/main.yml

@@ -21,6 +21,12 @@
 - name: Call `oc apply` on the copied file
   shell: oc -n {{app}} apply -f {{tmpfile.path}}
   run_once: true
+  when: global is not defined or not global
+
+- name: GLOBAL call `oc apply` on the copied file
+  shell: oc apply -f {{tmpfile.path}}
+  run_once: true
+  when: global is defined and global
 
 - name: Delete temporary file
   file: path={{tmpfile.path}} state=absent

roles/openshift/project/tasks/main.yml

@@ -35,6 +35,8 @@
     name: openshift/object
   vars:
     template_fullpath: "{{roles_path}}/openshift/project/templates/role-appowners.yml"
+    # Namespace-local roles are unusable until Openshift 3.6. Remove this global: true when upgraded.
+    global: true
 
 - name: appowners.yml
   include_role:

roles/openshift/project/templates/appowners.yml

@@ -6,7 +6,6 @@ metadata:
 roleRef:
   kind: Role
   name: appowner
-  namespace: "{{app}}"
 subjects:
 {% for owner in appowners %}
 - kind: User