-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
3.12.0.GA
-
None
-
False
-
None
-
False
-
-
##Issue
I have a customer with below concern :
Customer is using OpenShift DevSpaces 3.12.0 and setting auto-provisioning of namespaces turned off and setting advanced authorization enabled as below :
devEnvironments:
containerBuildConfiguration:
openShiftSecurityContextConstraint: container-build
defaultNamespace:
autoProvision: false <---------
template: <username>-devspaces
maxNumberOfWorkspacesPerUser: -1
secondsOfInactivityBeforeIdling: 1800
secondsOfRunBeforeIdling: -1
security: {}
startTimeoutSeconds: 300
storage:
pvcStrategy: per-user
$ oc get checluster devspaces -n openshift-operators -o yaml | grep -i networking -A12
networking:
auth:
advancedAuthorization: <------------
allowUsers:
- test
gateway:
configLabels:
app: che
component: che-gateway-config
kubeRbacProxy:
logLevel: 0
oAuthProxy:
cookieExpireSeconds: 86400
After this tried creating a sample workspace with kubeadmin user, But was not able to access the workspace and was getting below errors in upper right corner :
Automatic namespace provisioning is disabled. Namespace might note have been configured yet. Please contact the administrator.
Advanced authorization is enabled. User might not be allowed. Please, contact the administrator.
and in middle of the screen we get below error :
HTTP Error code 500. Endpoint which throws an error https://devspaces.apps.occ.cc.corp/api/kubernetes/namespace/provision. Check the browser logs message.
##Customer Expectation :
The error message in the upper right corner is correct.
But they don't like the error message in the middle of the screen:
HTTP Error code 500. Endpoint which throws an error https://devspaces.apps.occ.cc.corp/api/kubernetes/namespace/provision. Check the browser logs message.
Their request is that this "ugly" message should be replaced with a more user-friendly message, that is, messages like:
Automatic namespace provisioning is disabled. Namespace might note have been configured yet. Please contact the administrator.
or
Advanced authorization is enabled. User might not be allowed. Please, contact the administrator.
Should be displayed in the middle of the screen instead of the top right corner.
