Error popup when expanding project in Application Explorer #3520

Fixes: #3520

Signed-off-by: Victor Rubezhny <vrubezhny@redhat.com>

Author: vrubezhny

src/explorer.ts

@@ -270,15 +270,19 @@ export class OpenShiftExplorer implements TreeDataProvider<ExplorerItem>, Dispos
         } else {
             let serviceKinds: CustomResourceDefinitionStub[] = [];
             try {
-                serviceKinds = await getServiceKindStubs();
+                if (await Oc.Instance.canGetKubernetesObjects('csv')) {
+                    serviceKinds = await getServiceKindStubs();
+                }
             } catch (_) {
                 // operator framework is not installed on cluster; do nothing
             }
 
             const toCollect = [
                 Oc.Instance.getKubernetesObjects('Deployment'),
                 Helm.getHelmReleases(),
-                ...serviceKinds.map(serviceKind => Oc.Instance.getKubernetesObjects(serviceKind.name))
+                ...serviceKinds
+                    .filter(serviceKind => Oc.Instance.canGetKubernetesObjects(serviceKind.name))
+                    .map(serviceKind => Oc.Instance.getKubernetesObjects(serviceKind.name))
             ];
             if (await Oc.Instance.isOpenShiftCluster()) {
                 toCollect.push(

src/oc/ocWrapper.ts

@@ -194,6 +194,26 @@ export class Oc {
         return false;
     }
 
+    /**
+     * Returns true if the current user is authorized to get a kubernates objects on the cluster, and false otherwise.
+     *
+     * @param resourceType the string containing the [TYPE | TYPE/NAME | NONRESOURCEURL] of the kubernetes object
+     * @returns true if the current user is authorized to get a kubernates objects on the cluster, and false otherwise
+     */
+    public async canGetKubernetesObjects(resourceType: string): Promise<boolean> {
+        try {
+            const result = await CliChannel.getInstance().executeTool(
+                new CommandText('oc', `auth can-i get ${resourceType}`),
+            );
+            if (result.stdout === 'yes') {
+                return true;
+            }
+        } catch {
+            //ignore
+        }
+        return false;
+    }
+
     /**
      * Deletes all deployments in the current namespace that have a label "component" with a value `componentName`.
      *