From b7f274c816ff598b4e9e9410272bacfcd9a54d28 Mon Sep 17 00:00:00 2001
From: Gaurav Trivedi <gtrivedi@redhat.com>
Date: Tue, 28 Jul 2026 13:07:32 +0530
Subject: [PATCH] fix: escape shell variables in cluster-roles source blocks

The Secure audit PR (#3159) added +attributes to source blocks
that contain shell variables ${USER_ROLES} and ${OPERATOR_NAMESPACE}.
Asciidoctor tried to resolve these as AsciiDoc attributes, causing
"missing attribute" warnings that fail the publication builder.

Escape with backslash so Asciidoctor renders them literally while
still resolving {orch-cli} and {prod-operator}.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 ...ip_che-configuring-cluster-roles-for-users.adoc | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/modules/administration-guide/examples/snip_che-configuring-cluster-roles-for-users.adoc b/modules/administration-guide/examples/snip_che-configuring-cluster-roles-for-users.adoc
index a3534434f9..bfedfcafdc 100644
--- a/modules/administration-guide/examples/snip_che-configuring-cluster-roles-for-users.adoc
+++ b/modules/administration-guide/examples/snip_che-configuring-cluster-roles-for-users.adoc
@@ -32,7 +32,7 @@ $ {orch-cli} apply -f - <<EOF
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: ${USER_ROLES}
+  name: $\{USER_ROLES}
   labels:
     app.kubernetes.io/part-of: che.eclipse.org
 rules:
@@ -56,17 +56,17 @@ $ {orch-cli} apply -f - <<EOF
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: ${USER_ROLES}-operator
+  name: $\{USER_ROLES}-operator
   labels:
     app.kubernetes.io/part-of: che.eclipse.org
 subjects:
   - kind: ServiceAccount
     name: che-operator
-    namespace: ${OPERATOR_NAMESPACE}
+    namespace: $\{OPERATOR_NAMESPACE}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: ${USER_ROLES}
+  name: $\{USER_ROLES}
 EOF
 
 ----
@@ -76,7 +76,7 @@ EOF
 [source,bash,subs="+quotes,+macros,+attributes"]
 ----
 $ {orch-cli} patch checluster eclipse-che \
-  --patch '{"spec": {"components": {"cheServer": {"clusterRoles": ["'${USER_ROLES}'"]}}}}' \
+  --patch '{"spec": {"components": {"cheServer": {"clusterRoles": ["'$\{USER_ROLES}'"]}}}}' \
   --type=merge -n eclipse-che
 ----
 
@@ -85,7 +85,7 @@ $ {orch-cli} patch checluster eclipse-che \
 [source,bash,subs="+quotes,+macros,+attributes"]
 ----
 $ {orch-cli} patch checluster eclipse-che \
-  --patch '{"spec": {"devEnvironments": {"user": {"clusterRoles": ["'${USER_ROLES}'"]}}}}' \
+  --patch '{"spec": {"devEnvironments": {"user": {"clusterRoles": ["'$\{USER_ROLES}'"]}}}}' \
   --type=merge -n eclipse-che
 ----
 
@@ -99,7 +99,7 @@ $ {orch-cli} patch checluster eclipse-che \
 +
 [source,bash,subs="+quotes,+macros,+attributes"]
 ----
-$ {orch-cli} get clusterrole ${USER_ROLES}
+$ {orch-cli} get clusterrole $\{USER_ROLES}
 ----
 
 [role="_additional-resources"]