Che on OpenShift is not able to label namespace due to lack of permissions

[skabashnyuk]

Describe the bug

The default installation of Che on OpenShift is not able to label namespace due to lack of permissions.

Che version

• latest
• nightly
• other: please specify

Steps to reproduce

1. Setup che on OpenShift RHPDS with chectl chectl server:deploy --installer=operator --platform=openshift
2. Start workspace
3. New namespace created without lables.

Expected behavior

Namespace labeled successfully.

Runtime

• kubernetes (include output of kubectl version)
• Openshift (include output of oc version)
• minikube (include output of minikube version and kubectl version)
• minishift (include output of minishift version and oc version)
• docker-desktop + K8S (include output of docker version and kubectl version)
• other: (please specify)

Screenshots

Installation method

• chectl
  • provide a full command that was used to deploy Eclipse Che (including the output)
  • provide an output of chectl version command
• OperatorHub
• I don't know

Environment

• my computer
  • Windows
  • Linux
  • macOS
• Cloud
  • Amazon
  • Azure
  • GCE
  • other (please specify)
• Dev Sandbox (workspaces.openshift.com)
• other: please specify

Eclipse Che Logs

2021-03-25 13:58:49,667[nio-8080-exec-1]  [WARN ] [.c.w.i.k.n.KubernetesNamespace 193]  - Can't label the namespace due to lack of permissions. Grant cluster-wide permissions to `get` and `update` the `namespaces` to the `che` service account (Che operator might have already prepared a cluster role called `che-na │
│ mespace-editor` for this, depending on its configuration). Alternatively, consider disabling the feature by setting `che.infra.kubernetes.namepsace.label` to `false`.                                                                                                                                                     │
│ 2021-03-25 13:58:49,995[nio-8080-exec-1]  [INFO ] [o.e.c.a.w.s.WorkspaceRuntimes 480]   - Starting workspace 'opentlc-mgr/java-gradle-2yfc4' with id 'workspace6hkm2tzopkyj9lh9' by user 'opentlc-mgr'                                                                                                                     │
│ 2021-03-25 13:58:50,378[aceSharedPool-0]  [WARN ] [.c.w.i.k.n.KubernetesNamespace 193]  - Can't label the namespace due to lack of permissions. Grant cluster-wide permissions to `get` and `update` the `namespaces` to the `che` service account (Che operator might have already prepared a cluster role called `che-na │
│ mespace-editor` for this, depending on its configuration). Alternatively, consider disabling the feature by setting `che.infra.kubernetes.namepsace.label` to `false`.                                                                                                                                                     │
│ 2021-03-25 13:58:50,759[aceSharedPool-0]  [WARN ] [.c.w.i.k.n.KubernetesNamespace 193]  - Can't label the namespace due to lack of permissions. Grant cluster-wide permissions to `get` and `update` the `namespaces` to the `che` service account (Che operator might have already prepared a cluster role called `che-na │
│ mespace-editor` for this, depending on its configuration). Alternatively, consider disabling the feature by setting `che.infra.kubernetes.namepsace.label` to `false`.                                                                                                                                                     │
│ 2021-03-25 13:59:27,987[aceSharedPool-0]  [WARN ] [.c.w.i.k.n.KubernetesNamespace 193]  - Can't label the namespace due to lack of permissions. Grant cluster-wide permissions to `get` and `update` the `namespaces` to the `che` service account (Che operator might have already prepared a cluster role called `che-na │
│ mespace-editor` for this, depending on its configuration). Alternatively, consider disabling the feature by setting `che.infra.kubernetes.namepsace.label` to `false`.                                                                                                                                                     │
│ 2021-03-25 14:01:39,868[aceSharedPool-0]  [INFO ] [o.e.c.a.w.s.WorkspaceRuntimes 974]   - Workspace 'opentlc-mgr:java-gradle-2yfc4' with id 'workspace6hkm2tzopkyj9lh9' started by user 'opentlc-mgr'                                                                                                                      │
  <n

Additional context

[skabashnyuk]

Cluster role names are now what expected from log's message

[skabashnyuk]

Probably related prs eclipse-che/che-operator#603 and eclipse-che/che-operator#166 https://github.com/eclipse-che/che-operator/pull/543/files#diff-c9772ddc1ed08d9f54fa301ae58047756e33f73e5309795df6dca62d80411e51R36