This is an issue with non-resource-url reconciliation in roles
The additional allowed paths (/version/*) were not being added to the system:discovery role automatically
fixed in https://github.com/openshift/origin/pull/10785
Currently the deploy is v188.8.131.52, Waiting for v184.108.40.206 to verify the bug
This has been merged into ose and is in OSE v220.127.116.11 or newer.
The rpm's and images should be available now for testing.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.