fix: workspaces policies (#1429)

* fix: workspaces policies

Signed-off-by: Oleksii Orel <oorel@redhat.com>

* Update dev resources

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml

@@ -541,6 +541,7 @@ spec:
                 - pods/exec
               verbs:
                 - create
+                - get
             - apiGroups:
                 - apps
               resources:

config/rbac/cluster_role.yaml

@@ -156,6 +156,7 @@ rules:
       - pods/exec
     verbs:
       - create
+      - get
   - apiGroups:
       - apps
     resources:

deploy/deployment/kubernetes/combined.yaml

@@ -3935,6 +3935,7 @@ rules:
   - pods/exec
   verbs:
   - create
+  - get
 - apiGroups:
   - apps
   resources:

deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml

@@ -155,6 +155,7 @@ rules:
   - pods/exec
   verbs:
   - create
+  - get
 - apiGroups:
   - apps
   resources:

deploy/deployment/openshift/combined.yaml

@@ -3935,6 +3935,7 @@ rules:
   - pods/exec
   verbs:
   - create
+  - get
 - apiGroups:
   - apps
   resources:

deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml

@@ -155,6 +155,7 @@ rules:
   - pods/exec
   verbs:
   - create
+  - get
 - apiGroups:
   - apps
   resources:

helmcharts/next/templates/che-operator.ClusterRole.yaml

@@ -155,6 +155,7 @@ rules:
   - pods/exec
   verbs:
   - create
+  - get
 - apiGroups:
   - apps
   resources:

pkg/deploy/rbac/workspace_permissions.go

@@ -269,7 +269,7 @@ func (c *WorkspacePermissionsReconciler) getWorkspacesPolicies() []rbacv1.Policy
 		{
 			APIGroups: []string{""},
 			Resources: []string{"pods/exec"},
-			Verbs:     []string{"create"},
+			Verbs:     []string{"get", "create"},
 		},
 		{
 			APIGroups: []string{""},