Description of problem: When upgrading a cluster there needs to be a way to reconcile SCCs that are in the new code against existing cluster SCCs. This needs to be a cli command. The command should 1. Always reconcile the definitions (everything except users, groups, and priority) 2. Have an option to overwrite users, groups, and priority 3. Always reconcile nil priorities with new values if set 4. Show what will be reconciled and not save changes until --confirm is issued
PR https://github.com/openshift/origin/pull/5606
Additionally, an upgrade from 3.0.2 to 3.1 will pick up new default SCCs on server start, but will need a `oadm policy reconcile-sccs --confirm` to update any changed definitions
Checked with devenv_rhel7_2638, and work well.