chore: Allows to stop broken workspaces

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Author: tolusha

webhook/workspace/handler/kubernetes.go

@@ -43,6 +43,7 @@ func (h *WebhookHandler) validateKubernetesObjectPermissions(
 
 	kubeComponents := getKubeComponentsFromWorkspace(wksp)
 	for componentName, component := range kubeComponents {
+		log.Info("======================= Step 8")
 		if !component.GetDeployByDefault() {
 			// Intended to be applied later, will not be handled by DWO. It's up to whoever applies it to make
 			// sure that's safe to do (e.g. by using the user's token to apply the yaml)
@@ -61,6 +62,7 @@ func (h *WebhookHandler) validateKubernetesObjectPermissions(
 			return nil, fmt.Errorf("failed to read content for component %s", componentName)
 		}
 
+		log.Info("======================= Step 9")
 		if err := h.validatePermissionsOnObject(ctx, req, componentName, typeMeta); err != nil {
 			return nil, err
 		}
@@ -98,7 +100,9 @@ func (h *WebhookHandler) validatePermissionsOnObject(
 
 	// Check that user has permissions to use the resource
 	for _, verb := range userVerbs {
+		log.Info("Validating permission", "resource", resourceType, "verb", verb)
 		if err := h.checkSAR(ctx, req, typeMeta, resourceType, verb, componentName); err != nil {
+			log.Error(err, "Failed to validate permission", "resource", resourceType, "verb", verb)
 			return err
 		}
 	}