ROSA upgrade via OpenShift webconsole not allowed due to admission webhook

Solution Verified - Updated -

Environment

  • Red Hat OpenShift Service on AWS (ROSA)
    • 4

Issue

  • When trying to update/upgrade OpenShift ROSA cluster via web console the following error is shown. Similar error is shown when trying to upgrade using the oc CLI.

    An error occurred
admission webhook "regular-user-validation.managed.openshift.io" denied the request: Prevented from accessing Red Hat managed resources. This is in an effort to prevent harmful actions that may cause unintended consequences or affect the stability of the cluster. If you have any questions about this, please reach out to Red Hat support at https://access.redhat.com/support

Resolution

It is possible to upgrade ROSA clusters using the OCM web console or the rosa CLI, but not the OpenShift web console or the oc CLI.

Refer to the official ROSA documentation for upgrading ROSA for more detailed instructions:

And also refer to OSD/ROSA cluster requires user action before install or upgrade for additional information.

IMPORTANT: Please note that only the owner of the cluster or a user who installed the cluster can perform the upgrade of the cluster. If an ownership transfer of the cluster is needed, please refer to Ownership transfer of OSD/ROSA clusters.

To inform Red Hat about planned upgrades, follow the proactive case KCS guide provided in How to open a PROACTIVE case for a ROSA, OSD or ARO (OpenShift Managed Services).

Root Cause

OSD and ROSA upgrades uses the Managed Upgrade Operator to perform the upgrades, which do several checks before starting the cluster upgrade. Due to that, it is not supported to perform the update/upgrade via the OpenShift web console, and the only way to manage the upgrades is via rosa CLI or the OpenShift Cluster Manager console.

Diagnostic Steps

From the OpenShift Webconsole:

  • Menu -> Administration -> Cluster Settings -> Select Version -> Select New Version ( Desired openshift version ) -> Update

Error:

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments