Unable to list devworkspaces: devworkspaces.workspace.devfile.io is forbidden: User cannot list resource "devworkspaces" in API group "workspace.devfile.io" in the namespace

Summary

my chectl version

i have installed eclipse-che on k8s platform using below command

chectl server:deploy --che-operator-cr-patch-yaml=/Users/divine/Documents/office_tasks/TAP-4540/terraformCheJune17/eclipseche_yaml/che-operator-cr-patch.yaml --platform=k8s --installer=operator --debug --k8spoderrorrechecktimeout=1000000 --domain=eclipseche-dchelladurai-chejune15.calatrava.vmware.com --k8spodreadytimeout=1000000

i have integrated dex with github connector . i followed the steps mentioned here , to configure dex with github connector.

when i hit eclipse-che dashboard url, the webpage redirects to github login and after successful authentication flow in github, the webpage redirects back to eclipse-che dashboard url, but it fails to completely load the webpage due to error in below api’s.

https://eclipseche-dchelladurai-chejune15.calatrava.vmware.com/dashboard/api/namespace/divine-c-che-5j1hbg/devworkspacetemplates --403 - get request

https://eclipseche-dchelladurai-chejune15.calatrava.vmware.com/dashboard/api/namespace/divine-c-che-5j1hbg/devworkspaces --403 - get request

https://eclipseche-dchelladurai-chejune15.calatrava.vmware.com/dashboard/api/namespace/divine-c-che-5j1hbg/dockerconfig --403 - get request

below are the detailed information about the error

Failed to fetch available workspaces, reason: Failed to fetch the list of devWorkspaces. Unable to list devworkspaces: devworkspaces.workspace.devfile.io is forbidden: User "[e-mail]" cannot list resource "devworkspaces" in API group "workspace.devfile.io" in the namespace "divine-c-che-5j1hbg"

i’m also receiving Unsupported OAuth provider github error message from che pod in eclipse-che namespace

please help me to fix this error

Relevant information

No response

[sparkoo]

I’m wondering why 1st way didn’t work. But good that it’s working for you now.

[Divine1]

@sparkoo @tolusha Thank you responding with details

there were 2 suggestions mentioned in the above comments. i tested both of your suggestions. below is the feedback.

Suggestion1 (this didnot fix my issue)

i deleted my eclipse-che setup using chectl server:delete. then i updated by CheClusterCR file with below details.

apiVersion: org.eclipse.che/v2
kind: CheCluster
metadata:
  name: eclipse-che
spec:
  components:
    cheServer:
      extraProperties:
        CHE_OIDC_USERNAME__CLAIM: email
    database:
      externalDb: true
      postgresHostName: database-1-database.ap-south-1.rds.amazonaws.com
      postgresPort: "5432"
  networking:
    auth:
      identityProviderURL: https://dex-dchelladurai-chejune15.calatrava.vmware.com
      oAuthClientName: eclipse-che
      oAuthSecret: ZXhhbXBsZS1hcHAtc2VjcmV0

then i ran below command to deploy eclipse-che in k8s platform

chectl server:deploy --che-operator-cr-patch-yaml=/Users/divine/Documents/office_tasks/TAP-4540/terraformCheJune17/eclipseche_yaml/che-operator-cr-patch.yaml --platform=k8s --installer=operator --debug --k8spoderrorrechecktimeout=1000000 --domain=eclipseche-dchelladurai-chejune15.calatrava.vmware.com --k8spodreadytimeout=1000000

command completed successfully, but the issue was still replicated. my issue was not fixed.

may be i missed to do someother additional steps. any idea what was missed here?

Suggestion2 (this fixed my issue)

i deleted my eclipse-che setup using chectl server:delete. i edited kube-apiserver and updated with below details

then i ran below command to deploy eclipse-che in k8s platform

chectl server:deploy --che-operator-cr-patch-yaml=/Users/divine/Documents/office_tasks/TAP-4540/terraformCheJune17/eclipseche_yaml/che-operator-cr-patch.yaml --platform=k8s --installer=operator --debug --k8spoderrorrechecktimeout=1000000 --domain=eclipseche-dchelladurai-chejune15.calatrava.vmware.com --k8spodreadytimeout=1000000

command completed successfully. My issue got fixed