Skip to content

fix: grant dashboard SA read access to DevWorkspaceOperatorConfig (#2…#2103

Merged
dkwon17 merged 1 commit into7.115.xfrom
7.115.x-sa-read-dwoc
Mar 19, 2026
Merged

fix: grant dashboard SA read access to DevWorkspaceOperatorConfig (#2…#2103
dkwon17 merged 1 commit into7.115.xfrom
7.115.x-sa-read-dwoc

Conversation

@akurinnoy
Copy link
Contributor

What does this PR do?

Cherry-pick of #2099

Screenshot/screencast of this PR

What issues does this PR fix or reference?

How to test this PR?

  1. Deploy the operator:

OpenShift

./build/scripts/olm/test-catalog-from-sources.sh

or

build/scripts/docker-run.sh /bin/bash -c "
  oc login \
    --token=<...> \
    --server=<...> \
    --insecure-skip-tls-verify=true && \
  build/scripts/olm/test-catalog-from-sources.sh
"

on Minikube

./build/scripts/minikube-tests/test-operator-from-sources.sh

Common Test Scenarios

  • Deploy Eclipse Che
  • Start an empty workspace
  • Open terminal and build/run an image
  • Stop a workspace
  • Check operator logs for reconciliation errors or infinite reconciliation loops

PR Checklist

As the author of this Pull Request I made sure that:

Reviewers

Reviewers, please comment how you tested the PR when approving it.

)

The dashboard backup feature needs to read the DWOC to get backup
configuration (schedule, registry path, auth secret name). Without
this permission, the dashboard SA gets 403 Forbidden when reading
the DWOC in the DWO namespace, causing backup endpoints to fail
for all users.

Assisted-by: Claude Opus 4.6

Signed-off-by: Oleksii Kurinnyi <okurinny@redhat.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@openshift-ci
Copy link

openshift-ci bot commented Mar 19, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: akurinnoy, rohanKanojia

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dkwon17
Copy link
Contributor

dkwon17 commented Mar 19, 2026

/retest

1 similar comment
@dkwon17
Copy link
Contributor

dkwon17 commented Mar 19, 2026

/retest

@dkwon17 dkwon17 merged commit 82a80c7 into 7.115.x Mar 19, 2026
14 of 15 checks passed
@dkwon17 dkwon17 deleted the 7.115.x-sa-read-dwoc branch March 19, 2026 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants