question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Unable to create devworkspace: Unauthorized

See original GitHub issue

Describe the bug

When i try to create a new devworkspace an error shows up saying " Failed to create a workspace. Failed to create a new workspace from the devfile, reason: Failed to create a new workspace. Unable to create devworkspace: Unauthorized "

image

Che version

7.44@latest

Steps to reproduce

  1. chectl server:deploy --domain=che.xxx.eu --platform=k8s --che-operator-cr-yaml=checluster.yml --skip-oidc-provider-check -n che

Expected behavior

A devworkspace starts up =.

Runtime

Kubernetes (vanilla)

Screenshots

image

Installation method

chectl/latest

Environment

Windows

Eclipse Che Logs

No response

Additional context

Checluster file used in deployment.

apiVersion: org.eclipse.che/v1
kind: CheCluster
metadata:
  name: eclipse-che
spec:
  auth:
    externalIdentityProvider: true
    #identityProviderIngress: traefik
    identityProviderClientId: 'eclispe-che'
    identityProviderRealm: opencell
    identityProviderURL:  https://kc.osama-che.me/auth/realms/opencell/
    openShiftoAuth: false
    updateAdminPassword: false
    identityProviderPassword: 'admin' 

  server:
    serverExposureStrategy: 'multi-host'
    workspaceNamespaceDefault: che-ws-<username>
    #cheServerIngress: "traefik"
    customCheProperties:
      CHE_OIDC_USERNAME__CLAIM: "email"
      CHE_INFRA_KUBERNETES_TLS__SECRET: ''
      CHE_KEYCLOAK_CLIENT__ID: 'eclipse-che'
      CHE_KEYCLOAK_REALM: 'opencell'

      CHE_INFRA_KUBERNETES_INGRESS_ANNOTATIONS__JSON: 
        '{
          "kubernetes.io/ingress.class": "nginx", 
          "nginx.ingress.kubernetes.io/affinity": "true", 
          "nginx.ingress.kubernetes.io/rewrite-target": "/",
          "ingress.kubernetes.io/ssl-redirect": "true",
          "ingress.kubernetes.io/force-ssl-redirect": "true" 
        }'
  database:
    externalDb: false

  k8s:
    tlsSecretName: 'che-tls'
    ingressClass: 'nginx'
    ingressDomain: 'che.xxx.eu'  
    ingressStrategy: 'multi-host'
    securityContextRunAsUser: '0'
    securityContextFsGroup: '0'

Issue Analytics

  • State:closed
  • Created a year ago
  • Reactions:1
  • Comments:8 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
Ryder05commented, Apr 28, 2022

Having the same issue with version 7.46.0

I finally resolved the problem by configuring Keycloak as an OIDC provider for my Kubernetes cluster. https://github.com/eclipse/che/issues/21049#issuecomment-1022108499

0reactions
tolushacommented, May 11, 2022

Can we close this issue?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Chapter 4. Known issues Red Hat CodeReady Workspaces 2.12
CodeReady Workspaces might fail to create a workspace when the network is unstable ... A workspace running with the Dev Workspace engine might...
Read more >
Troubleshooting Operator issues - OpenShift Documentation
Refreshing failing subscriptions. Operators are a method of packaging, deploying, and managing an OpenShift Container Platform application.
Read more >
Troubleshoot issues accessing your WorkSpace from the ...
This error typically indicates that the WorkSpaces client can authenticate over port 443, but can't establish a streaming connection over UDP ...
Read more >
Power BI Workspace - dataset credential patch receives 401 ...
... PowerBI API is just a bare 401 error, nothing tells the user that the problem is that the API validated the OAuth...
Read more >
Search OpenShift CI
#1910801 bug 23 months ago #1890995 bug 21 months ago #1921857 bug 21 months ago #1936404 bug 21 months ago
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found