Cluster Update Fails with scc clusterrole errors
Issue
-
Cluster
upgradeis blocked due to below error,message: 'Could not update clusterrole "system:openshift:scc:hostnetwork" (87 of 881): the object is invalid, possibly due to local cluster configuration' reason: UpdatePayloadResourceInvalid status: "True" type: Failing message: 'Unable to apply 4.15.46: some cluster configuration is invalid' reason: UpdatePayloadResourceInvalid -
In CVO logs, it is showing that a
custom resource(CR) hascontrolleris set as true in ownerReference field.1 sync_worker.go:1146] Update error 87 of 881: UpdatePayloadResourceInvalid Could not update clusterrole "system:openshift:scc:hostnetwork" (87 of 881): the object is invalid, possibly due to local cluster configuration (*errors.StatusError: ClusterRole.rbac.authorization.k8s.io "system:openshift:scc:hostnetwork" is invalid: metadata.ownerReferences: Invalid value: []v1.OwnerReference{v1.OwnerReference{APIVersion:"config.openshift.io/v1", Kind:"NginxIngress", Name:"nginxingress-plus", UID:"92aa0843-f45f-4394-8e64-4e4e27bca9b7", Controller:(*bool)(0xc04a34b789), BlockOwnerDeletion:(*bool)(nil)}, v1.OwnerReference{APIVersion:"config.openshift.io/v1", Kind:"ClusterVersion", Name:"version", UID:"c3ce3270-b883-4c28-ac02-37be8a2e63e8", Controller:(*bool)(0xc04a34b78a), BlockOwnerDeletion:(*bool)(nil)}}: Only one reference can have Controller set to true. Found "true" in references for NginxIngress/nginxingress-plus and ClusterVersion/version)
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.