Cluster Update Fails with scc clusterrole errors

Solution Verified - Updated -

Issue

  • Cluster upgrade is blocked due to below error,

      message: 'Could not update clusterrole "system:openshift:scc:hostnetwork" (87
        of 881): the object is invalid, possibly due to local cluster configuration'
      reason: UpdatePayloadResourceInvalid
      status: "True"
      type: Failing
      message: 'Unable to apply 4.15.46: some cluster configuration is invalid'
      reason: UpdatePayloadResourceInvalid
    
  • In CVO logs, it is showing that a custom resource (CR) has controller is set as true in ownerReference field.

    1 sync_worker.go:1146] Update error 87 of 881: UpdatePayloadResourceInvalid Could not update clusterrole "system:openshift:scc:hostnetwork" (87 of 881): the object is invalid, possibly due to local cluster configuration (*errors.StatusError: ClusterRole.rbac.authorization.k8s.io "system:openshift:scc:hostnetwork" is invalid: metadata.ownerReferences: Invalid value: []v1.OwnerReference{v1.OwnerReference{APIVersion:"config.openshift.io/v1", Kind:"NginxIngress", Name:"nginxingress-plus", UID:"92aa0843-f45f-4394-8e64-4e4e27bca9b7", Controller:(*bool)(0xc04a34b789), BlockOwnerDeletion:(*bool)(nil)}, v1.OwnerReference{APIVersion:"config.openshift.io/v1", Kind:"ClusterVersion", Name:"version", UID:"c3ce3270-b883-4c28-ac02-37be8a2e63e8", Controller:(*bool)(0xc04a34b78a), BlockOwnerDeletion:(*bool)(nil)}}: Only one reference can have Controller set to true. Found "true" in references for NginxIngress/nginxingress-plus and ClusterVersion/version)
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content