When CREATE_NAMESPACE_ON_PUSH is set to true, querying a non-existent organization with sufficient permissions to create that namespace returns HTTP 401. This is unexpected as the user is authorized to create the namespace. Expected behavior is that if the user has authorization to create the namespace, querying a non-existent namespace would return HTTP 404.
Ref CoreOS Slack: https://coreos.slack.com/archives/C7WH69HCY/p1642532414072900