CRW was installed with the ' --enable-oauth ' option.

It seems to start a workspace, the user must be a cluster (not project) admin.

• Per [1] at line 54, " * <p>Note that `view` role is used from cluster scope and `exec` role is created in the current namespace if does not exist."

• We see createExecRoleBinding() specifies a namespace, but createViewRoleBinding() does not.

It's not realistic to ask our users to allow everyone that wants to start a workspace to be a cluster admin. Please fix this.

[1] https://github.com/eclipse/che/blob/7b6cd44e36e94d40f366b5dcd2fe46074e8a7bad/infrastructures/openshift/src/main/java/org/eclipse/che/workspace/infrastructure/openshift/project/OpenShiftWorkspaceServiceAccount.java