Release notes and known issues
Release notes and known issues for Red Hat OpenShift Dev Spaces 3.7
Abstract
Making open source more inclusive Copy linkLink copied to clipboard!
Red Hat is committed to replacing problematic language in our code, documentation, and web properties. We are beginning with these four terms: master, slave, blacklist, and whitelist. Because of the enormity of this endeavor, these changes will be implemented gradually over several upcoming releases. For more details, see our CTO Chris Wright’s message.
Chapter 1. About Red Hat OpenShift Dev Spaces Copy linkLink copied to clipboard!
Red Hat OpenShift Dev Spaces provides web-based development environments on Red Hat OpenShift with an enterprise-level setup:
- Cloud Development Environments (CDE) server
- IDEs such as Microsoft Visual Studio Code - Open Source and JetBrains IntelliJ IDEA Community (Technology Preview)
- Containerized environments with popular programming languages, frameworks, and Red Hat technologies
Red Hat OpenShift Dev Spaces is well-suited for container-based development.
Red Hat OpenShift Dev Spaces 3.7 is based on Eclipse Che 7.67.
1.1. Supported platforms Copy linkLink copied to clipboard!
OpenShift Dev Spaces runs on OpenShift 4.10–4.13 on the following CPU architectures:
-
AMD64 and Intel 64 (
x86_64) -
IBM Power (
ppc64le) and IBM Z (s390x)
Additional resources
1.2. Support policy Copy linkLink copied to clipboard!
For Red Hat OpenShift Dev Spaces 3.7, Red Hat will provide support for deployment, configuration, and use of the product.
Additional resources
1.3. Differences between Red Hat OpenShift Dev Spaces and Eclipse Che Copy linkLink copied to clipboard!
There are some differences between Red Hat OpenShift Dev Spaces and the upstream project on which it is based, Eclipse Che:
- OpenShift Dev Spaces is supported only on Red Hat OpenShift.
- OpenShift Dev Spaces is based on Red Hat Enterprise Linux and is regularly updated to include the latest security fixes.
- OpenShift Dev Spaces provides devfiles for working with languages and technologies such as Quarkus, Lombok, NodeJS, Python, DotNet, Golang, C/C++, and PHP. You can find the latest sample projects in the devspaces-devfileregistry container image sources.
- OpenShift Dev Spaces uses OpenShift OAuth for user login and management.
Red Hat provides licensing and packaging to ensure enterprise-level support for OpenShift Dev Spaces.
Chapter 2. New features and enhancements Copy linkLink copied to clipboard!
2.1. Update to Traefik 2.9.6 Copy linkLink copied to clipboard!
With this update, the included version of Traefik is updated from 2.8.1 to 2.9.6
Additional resources
2.2. Specifying workspaces gateway and project-clone containers Copy linkLink copied to clipboard!
With this update of the CheCluster Custom Resource, a gatewayContainer and projectCloneContainer sections are added under .spec.devEnvironments. This enhancement allows the administrators to specify the details of the container that will host the workspace reverse proxy (gateway) and the container that clones the remote Git repositories:
You can use this enhancement to remove the CPU limits for the containers:
Additional resources
2.3. Introduction of an Ansible sample Copy linkLink copied to clipboard!
This enhancement introduces an Ansible sample in the OpenShift Dev Spaces dashboard for Ansible developers.
To use this sample in restricted environments, follow these steps:
Mirror the following images:
-
quay.io/devspaces/ansible-creator-ee@sha256:bae361e92ee61c95c33b98218998f10e7c69949ccf0501d16d9751d8debf66f8 -
registry.access.redhat.com/ubi8/ubi-init@sha256:75cb1eb60b9636f8daa584c231db552c1de94006778e7224643804a696f04fad
-
Configure the cluster proxy to allow access to the following domains:
-
.ansible.com -
.ansible-galaxy.s3.amazonaws.com
-
This sample is currently supported for workspaces that run with the Microsoft Visual Studio Code - Open Source IDE. Support for workspaces that run with the JetBrains IntelliJ IDEA Community Edition IDE, which is a Technology Preview, will be added with a future release.
This sample is currently supported on AMD64 and Intel 64 (x86_64). Support for the IBM Power (ppc64le) and IBM Z (s390x) CPU architectures will be added with a future release.
Additional resources
2.4. Change to workspace URLs Copy linkLink copied to clipboard!
Before this update, workspace URLs contained strings of random characters. With this update, the URLs contain the following parameters:
-
username -
workspace name -
endpoint name -
port
For example, if user john creates a quarkus-todo workspace that exposes a backend endpoint using my-dev-spaces-instance.com, the resulting URLs are as follows:
-
Microsoft Visual Studio Code - Open Source:
https://my-dev-spaces-instance.com/john/quarkus-todo/3100/ -
Endpoint application preview:
https://john-quarkus-todo-backend.my-dev-spaces.com/
Additional resources
2.5. Configuring workspaces with .code-workspaces file Copy linkLink copied to clipboard!
With this update, developers can use the .code-workspace file to configure the workspaces in Microsoft Visual Studio Code - Open Source. Specify the .code-workspaces file for your project in the devfile with the environment variable VSCODE_DEFAULT_WORKSPACE:
Additional resources
2.6. Using TLS certificates signed by a trusted CA to access Open VSX registry instances Copy linkLink copied to clipboard!
With this update, the trusted enterprise Certificate Authorities (CAs) specified for workspaces, are used by Microsoft Visual Studio Code - Open Source to trust any TLS certificate signed by the specified CAs. Microsoft Visual Studio Code - Open Source can access Open VSX registry instances that use them.
Additional resources
2.7. Microsoft Visual Studio Code - Open Source honors NO_PROXY environment variable Copy linkLink copied to clipboard!
With this update, Microsoft Visual Studio - Open Source honors the NO_PROXY environment variable. You can use the environment variable to specify hosts that should be connected directly and not through a corporate proxy.
This feature is available for the OpenShift Dev Spaces version of Microsoft Visual Studio Code - Open Source. The upstream version of the IDE does not support it.
Additional resources
2.8. Introduction of an Ansible sample Copy linkLink copied to clipboard!
This enhancement introduces an Ansible sample in the OpenShift Dev Spaces dashboard for Ansible developers.
To use this sample in restricted environments, follow these steps:
Mirror the following images:
-
quay.io/devspaces/ansible-creator-ee@sha256:3ff5d2d5f17c9c1e4a352d9922e27be09641647ac028a56845aaab6f6e3c7958 -
registry.access.redhat.com/ubi8/ubi-init@sha256:75cb1eb60b9636f8daa584c231db552c1de94006778e7224643804a696f04fad
-
Configure the cluster proxy to allow access to the following domains:
-
.ansible.com -
.ansible-galaxy.s3.amazonaws.com
-
This sample is currently supported for workspaces that run with the Microsoft Visual Studio Code - Open Source IDE. Support for workspaces that run with the JetBrains IntelliJ IDEA Community Edition IDE, which is a Technology Preview, will be added with a future release.
This sample is currently supported on AMD64 and Intel 64 (x86_64). Support for the IBM Power (ppc64le) and IBM Z (s390x) CPU architectures will be added with a future release.
Additional resources
Chapter 3. Bug fixes Copy linkLink copied to clipboard!
3.1. Fixed webviews in Microsoft Visual Studio Code - Open Source for restricted environments Copy linkLink copied to clipboard!
Before this update, webviews in Microsoft Visual Studio Code - Open Source did not render correctly in restricted environments. This issue occurred because the browser could not download static resources from the public Internet behind a proxy. With this update, the OpenShift Dev Spaces build of Microsoft Visual Studio Code - Open Source serves those resources directly from its server, which is usually accessible through proxies.
Additional resources
3.2. Fixed detection of Bitbucket Server access tokens in workspaces Copy linkLink copied to clipboard!
Before this update, as a result of a bug, Bitbucket Server access tokens were not detected as Kubernetes Secrets. The editor in the workspace did not detect an access token for Bitbucket Server. With this update, individual users can resume using Bitbucket Server access tokens as Kubernetes Secrets.
Additional resources
3.3. Fixed workspace startup with GitLab and Bitbucket raw devfile link Copy linkLink copied to clipboard!
Before this update, new workspaces using a raw link to a devfile hosted by GitLab or Bitbucket could fail to start with the following error message: "Internal Server Error occurred". With this update, the issue is solved.
Additional resources
3.4. Fixed workspace startup with devfiles that specify a URI for a Kubernetes component Copy linkLink copied to clipboard!
Before this update, workspaces failed to start when a Kubernetes component in the devfile used the uri field and regardless of the value of deployByDefault. As a result, some of the samples in the Developer view of the OpenShift web console failed to load in OpenShift Dev Spaces. With this update, Kubernetes components that have the deployByDefault field set to false are ignored in devfiles when a workspace starts.
Additional resources
3.5. Fixed workspace startup with Git repositories hosted by Microsoft Azure Copy linkLink copied to clipboard!
Before this update, for Git repositories that are hosted by Microsoft Azure DevOps, new workspaces might fail to start due to a Workspace does not exist error. With this update, the issue is resolved.
Additional resources
3.6. Fixed delayed echo when typing in Microsoft Visual Studio Code - Open Source embedded terminal Copy linkLink copied to clipboard!
Before this update, developers could experience a delay between typing and the characters appearing in the Microsoft Visual Studio Code - Open Source embedded terminal. With this update, the default GPU acceleration is changed to canvas which solves the issue.
Additional resources
Chapter 4. Technology Preview Copy linkLink copied to clipboard!
Technology Preview features provide early access to upcoming product innovations, enabling you to test functionality and provide feedback during the development process. However, these features are not fully supported under Red Hat Subscription Level Agreements, may not be functionally complete, and are not intended for production use. As Red Hat considers making future iterations of Technology Preview features generally available, we will attempt to resolve any issues that customers experience when using these features. See: Technology Preview support scope.
None.
Chapter 5. Deprecated functionalities Copy linkLink copied to clipboard!
None.
Chapter 6. Removed functionalities Copy linkLink copied to clipboard!
None.
Chapter 7. Known issues Copy linkLink copied to clipboard!
7.1. FIPS compliance update Copy linkLink copied to clipboard!
There’s a known issue with FIPS compliance that results in certain cryptographic modules not being FIPS-validated. Below is a list of requirements and limitations for using FIPS with OpenShift Dev Spaces:
Required cluster and operator updates
Update your Red Hat OpenShift Container Platform installation to the latest z-stream update for 4.11, 4.12, or 4.13 as appropriate. If you do not already have FIPS enabled, you will need to uninstall and reinstall.
Once the cluster is up and running, install OpenShift Dev Spaces 3.7.1 (3.7-264) and verify that the latest DevWorkspace operator bundle 0.21.2 (0.21-7) or newer is also installed and updated. See https://catalog.redhat.com/software/containers/devworkspace/devworkspace-operator-bundle/60ec9f48744684587e2186a3
Golang compiler in UDI image
The Universal Developer Image (UDI) container includes a golang compiler, which was built without the CGO_ENABLED=1 flag. The check-payload scanner ( https://github.com/openshift/check-payload ) will throw an error, but this can be safely ignored provided that anything you build with this compiler sets the correct flag CGO_ENABLED=1 and does NOT use extldflags -static or -tags no_openssl.
The resulting binaries can be scanned and should pass without error.
Statically linked binaries
You can find statically linked binaries not related to cryptography in these two containers:
- code-rhel8
- idea-rhel8.
As they are not related to cryptography, they do not affect FIPS compliance.
Helm support for FIPS
The UDI container includes the helm binary, which was not compiled with FIPS support. If you are in a FIPS environment do not use helm.
Additional resources
7.2. Incorrect user name and email in commit messages for some users Copy linkLink copied to clipboard!
There is currently a known issue for users who are using a Kubernetes Secret with their Git-provider credentials. The user name and email for Git operations in workspaces for those users are currently taken from the user-profile Secret of the <user>-devspaces namespace.
This known issue does not impact Git-provider OAuth that has been configured by administrators.
Workaround
In the editor terminal of the running workspace, run the following commands to set your commit author name and email:
git commit config --global user.name <your_name> git commit config --global user.email <your_email>
git commit config --global user.name <your_name> git commit config --global user.email <your_email>Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
7.3. Debugger does not work in the .NET sample Copy linkLink copied to clipboard!
Currently, the debugger in Microsoft Visual Studio Code - Open Source does not work in the .NET sample.
Workaround
Use a different image from the following sources:
Additional resources
Chapter 8. Frequently asked questions Copy linkLink copied to clipboard!
- Is it possible to deploy applications from OpenShift Dev Spaces to an OpenShift cluster?
-
The user must log in to the OpenShift cluster from their running workspace using
oc login. - For best performance, what is the recommended storage to use for Persistent Volumes used with OpenShift Dev Spaces?
- Use block storage.
- Is it possible to deploy more than one OpenShift Dev Spaces instance on the same cluster?
- Only one OpenShift Dev Spaces instance can be deployed per cluster.
- Is it possible to install OpenShift Dev Spaces offline (that is, disconnected from the internet)?
- See Installing Red Hat OpenShift Dev Spaces in restricted environments on OpenShift.
- Is it possible to use non-default certificates with OpenShift Dev Spaces?
- You can use self-signed or public certificates. See Importing untrusted TLS certificates.
- Is it possible to run multiple workspaces simultaneously?
- See Enabling users to run multiple workspaces simultaneously.