Release notes and known issues
Release notes and known issues for Red Hat OpenShift Dev Spaces 3.13
Abstract
Making open source more inclusive Copy linkLink copied to clipboard!
Red Hat is committed to replacing problematic language in our code, documentation, and web properties. We are beginning with these four terms: master, slave, blacklist, and whitelist. Because of the enormity of this endeavor, these changes will be implemented gradually over several upcoming releases. For more details, see our CTO Chris Wright’s message.
Chapter 1. About Red Hat OpenShift Dev Spaces Copy linkLink copied to clipboard!
Red Hat OpenShift Dev Spaces provides web-based development environments on Red Hat OpenShift with an enterprise-level setup:
- Cloud Development Environments (CDE) server
- IDEs such as Microsoft Visual Studio Code - Open Source and JetBrains IntelliJ IDEA Community (Technology Preview)
- Containerized environments with popular programming languages, frameworks, and Red Hat technologies
Red Hat OpenShift Dev Spaces is well-suited for container-based development.
Red Hat OpenShift Dev Spaces 3.13 is based on Eclipse Che 7.84.
1.1. Supported platforms Copy linkLink copied to clipboard!
OpenShift Dev Spaces runs on OpenShift 4.12–4.15 on the following CPU architectures:
-
AMD64 and Intel 64 (
x86_64) -
IBM Power (
ppc64le) and IBM Z (s390x)
Additional resources
1.2. Support policy Copy linkLink copied to clipboard!
For Red Hat OpenShift Dev Spaces 3.13, Red Hat will provide support for deployment, configuration, and use of the product.
Additional resources
1.3. Differences between Red Hat OpenShift Dev Spaces and Eclipse Che Copy linkLink copied to clipboard!
There are some differences between Red Hat OpenShift Dev Spaces and the upstream project on which it is based, Eclipse Che:
- OpenShift Dev Spaces is supported only on Red Hat OpenShift.
- OpenShift Dev Spaces is based on Red Hat Enterprise Linux and is regularly updated to include the latest security fixes.
- OpenShift Dev Spaces provides devfiles for working with languages and technologies such as Quarkus, Lombok, NodeJS, Python, DotNet, Golang, C/C++, and PHP. You can find the latest sample projects in the devspaces-devfileregistry container image sources.
- OpenShift Dev Spaces uses OpenShift OAuth for user login and management.
Red Hat provides licensing and packaging to ensure enterprise-level support for OpenShift Dev Spaces.
Chapter 2. New features and enhancements Copy linkLink copied to clipboard!
2.1. New "Editor Selector" panel on the User Dashboard Copy linkLink copied to clipboard!
With this release, you can easily choose an editor when starting a workspace from the User Dashboard by using the brand-new "Editor Selector" panel.
Find more details about specifying a custom editor in the official documentation.
Additional resources
2.2. Support URL parameters in the custom definition of the getting started sample Copy linkLink copied to clipboard!
Starting from this release, you can add parameters when defining a URL of a getting started sample:
{
"displayName": "Example",
"description": "Example",
"tags": ["example"],
"url": "https://example.com/my-project.git?df=next/base/devfile.yaml"
}
Find more details about configuring getting started samples in the official documentation.
Additional resources
2.3. Configure trusted extensions for Visual Studio Code - Open Source ("Code - OSS") Copy linkLink copied to clipboard!
With this release, you can specify which extensions are trusted and can access authentication tokens using the dedicated VSCODE_TRUSTED_EXTENSIONS environment variable defined in the devfile or ConfigMap:
env:
- name: VSCODE_TRUSTED_EXTENSIONS
value: "<publisher1>.<extension1>,<publisher2>.<extension2>"
Find more details about the enhancement in the official documentation.
Additional resources
2.4. Automation of the images expected to be used by ImagePuller Copy linkLink copied to clipboard!
With this release, if the imagePuller option is enabled on the CheCluster Custom Resource level, the operator automatically fetches related images from both devfile and plugin registries to create and manage ImagePuller Custom Resource for faster workspace startup.
Find more details about the enhancement in the official documentation.
Additional resources
2.5. Add an ability to revoke GitLab OAuth from Dashboard Copy linkLink copied to clipboard!
Before this release, only revoking GitHub OAuth from the User Dashboard was supported. Recently, GitLab added a Revoke a token API and it is now possible to also revoke the GitLab OAuth access right from the User Dashboard.
For other Git Services navigation to the provider website and following the instructions for revoking OAuth access is required.
Additional resources
2.6. Provide hover with full workspace name in "Recent Workspaces" list Copy linkLink copied to clipboard!
Hovering over a workspace from the "Recent Workspaces" expands the name if it is long and does not fit the sidebar.
Additional resources
2.7. Add provider name annotation to Personal Access Token secret Copy linkLink copied to clipboard!
Starting from this release, when you create a Personal Access Token on the User Dashboard, the "Provider" field will correspond to the dedicated Git Service. Previously , oauth2- string with a random postfix was used. This resulted in poor visibility.
Additional resources
Chapter 3. Bug fixes Copy linkLink copied to clipboard!
3.1. Persistent Home does not work with per-workspace storage strategy Copy linkLink copied to clipboard!
Previously, the persistUserHome CheCluster Custom Resource property was not working with the per-workspace storage strategy. The defect has been fixed in this release and now you can use the persistUserHome option with both the per-user and the per-workspace storage strategies.
Find more details about the property in the official documentation.
Additional resources
3.2. "Restart Workspace from Local Devfile" fails with "You can only have 1 running workspace at a time." Copy linkLink copied to clipboard!
Before this release, there was a sporadic defect affecting workspace startup after using the "Restart Workspace from local Devfile" functionality from che-code. The following error message would appear: "You can only have 1 running workspace at a time". With this release, the issue is fixed.
Additional resources
3.3. Workspace startup failures from Bitbucket server repository via OAuth2 Copy linkLink copied to clipboard!
Before this release, workspace startup from a Bitbucket Server private repository using OAuth2 failed with the "Repository/Devfile URL is missing" error. With this release, the issue is fixed.
Additional resources
3.4. CORS-related network error when fetching editor devfile Copy linkLink copied to clipboard!
Referencing an editor using che-editor URL parameter could result in a CORS-related network error. The defect has been fixed in this release.
Additional resources
3.5. Missing URL sanitization for Git URL from User Preferences Personal Access Token Dialog Copy linkLink copied to clipboard!
Previously, when a developer created a Personal Access Token from the User Preferences, there was no validation of the Git URL. If the URL was invalid it led to login and dashboard usage issues due to a java.net.URISyntaxException: Illegal character exception. To resolve the access issue, you had to manually intervene with the generated secret. The defect has been fixed in this release.
Additional resources
3.6. Import from Git widget does not trim spaces in the input value Copy linkLink copied to clipboard!
Before this release, trailing spaces were not trimmed in the input field of the "Import from Git" widget resulting in the "URL or SSHLocation is not valid" error.
Additional resources
3.7. Revoke OAuth button still in active state after OAuth revoked Copy linkLink copied to clipboard!
Previously, the Revoke OAuth button continued to be active after the execution. The defect has been fixed in this release.
Additional resources
Chapter 4. Technology Preview Copy linkLink copied to clipboard!
Technology Preview features provide early access to upcoming product innovations, enabling you to test functionality and provide feedback during the development process. However, these features are not fully supported under Red Hat Subscription Level Agreements, may not be functionally complete, and are not intended for production use. As Red Hat considers making future iterations of Technology Preview features generally available, we will attempt to resolve any issues that customers experience when using these features. See: Technology Preview support scope.
None.
Chapter 5. Deprecated functionalities Copy linkLink copied to clipboard!
5.1. End of devfile V1 support Copy linkLink copied to clipboard!
With this release, devfile V1 is not supported anymore and the devfile-converter package is removed.
Additional resources
Chapter 6. Removed functionalities Copy linkLink copied to clipboard!
None.
Chapter 7. Known issues Copy linkLink copied to clipboard!
7.1. Ansible Lightspeed not connecting to Ansible server Copy linkLink copied to clipboard!
There is a known issue with Ansible Lightspeed and connection to the Ansible server. If the OpenShift Dev Spaces environment is not under *.openshiftapps.com domain, Ansible Lightspeed can not connect to the Ansible server.
There is no workaround available.
Additional resources
7.2. FIPS compliance update Copy linkLink copied to clipboard!
There’s a known issue with FIPS compliance that results in certain cryptographic modules not being FIPS-validated. Below is a list of requirements and limitations for using FIPS with OpenShift Dev Spaces:
Required cluster and operator updates
Update your Red Hat OpenShift Container Platform installation to the latest z-stream update for 4.11, 4.12, or 4.13 as appropriate. If you do not already have FIPS enabled, you will need to uninstall and reinstall.
Once the cluster is up and running, install OpenShift Dev Spaces 3.7.1 (3.7-264) and verify that the latest DevWorkspace operator bundle 0.21.2 (0.21-7) or newer is also installed and updated. See https://catalog.redhat.com/software/containers/devworkspace/devworkspace-operator-bundle/60ec9f48744684587e2186a3
Golang compiler in UDI image
The Universal Developer Image (UDI) container includes a golang compiler, which was built without the CGO_ENABLED=1 flag. The check-payload scanner ( https://github.com/openshift/check-payload ) will throw an error, but this can be safely ignored provided that anything you build with this compiler sets the correct flag CGO_ENABLED=1 and does NOT use extldflags -static or -tags no_openssl.
The resulting binaries can be scanned and should pass without error.
Statically linked binaries
You can find statically linked binaries not related to cryptography in these two containers:
- code-rhel8
- idea-rhel8.
As they are not related to cryptography, they do not affect FIPS compliance.
Helm support for FIPS
The UDI container includes the helm binary, which was not compiled with FIPS support. If you are in a FIPS environment do not use helm.
Additional resources
7.3. Debugger does not work in the .NET sample Copy linkLink copied to clipboard!
Currently, the debugger in Microsoft Visual Studio Code - Open Source does not work in the .NET sample.
Workaround
Use a different image from the following sources:
Additional resources
Chapter 8. Frequently asked questions Copy linkLink copied to clipboard!
- Is it possible to deploy applications from OpenShift Dev Spaces to an OpenShift cluster?
-
The user must log in to the OpenShift cluster from their running workspace using
oc login. - For best performance, what is the recommended storage to use for Persistent Volumes used with OpenShift Dev Spaces?
- Use block storage.
- Is it possible to deploy more than one OpenShift Dev Spaces instance on the same cluster?
- Only one OpenShift Dev Spaces instance can be deployed per cluster.
- Is it possible to install OpenShift Dev Spaces offline (that is, disconnected from the internet)?
- See Installing Red Hat OpenShift Dev Spaces in restricted environments on OpenShift.
- Is it possible to use non-default certificates with OpenShift Dev Spaces?
- You can use self-signed or public certificates. See Importing untrusted TLS certificates.
- Is it possible to run multiple workspaces simultaneously?
- See Enabling users to run multiple workspaces simultaneously.