-
Bug
-
Resolution: Unresolved
-
Critical
-
3.4.0.GA
-
None
-
False
-
None
-
False
-
-
Description of problem:
When we try to installDespace into openshift-operators namespace and change disableContainerBuildCapabilities: false workspaces start with failures
Prerequisites (if any, like setup, operators/versions):
Steps to Reproduce
- Get an empty cluster and set up a DS 3.4.0 with the Operator using UI. We can set up the operator click on the default values
- After setting up the operator create Che server instance thing UI in the current ** openshift-operators namespace
- Waiting for installation. Got to the Che-Server and change
- disableContainerBuildCapabilities: -> false
- Got to the DevSpaces Dashboard and create for instance Empty workspace
Actual results:
The workspace fails with problem like Error provisioning rbac: roles.rbac.authorization.k8s.io "devworkspace-use-container-build" is forbidden: user "system:serviceaccount:openshift-operators:devworkspace-controller-serviceaccount" (groups=["system:serviceaccounts" "system:serviceaccounts:openshift-operators" "system:authenticated"]) is attempting to grant RBAC permissions not currently held: {APIGroups:["security.openshift.io"], Resources:["securitycontextconstraints"], ResourceNames:["container-build"], Verbs:["use"]}
Expected results:
The workspace should start with enabled build capabilities mode
Reproducibility (Always/Intermittent/Only Once):
Always
Build Details:
** DS 3.4.0.RC-02-03 + DWO.18.0.1