confirmed with latest version, the issue has fixed: [zhouying@dhcp-140-138 ~]$ oc get SecurityContextConstraints restricted -o name securitycontextconstraints.security.openshift.io/restricted [zhouying@dhcp-140-138 ~]$ oc version -o yaml clientVersion: buildDate: "2019-12-13T22:26:47Z" compiler: gc gitCommit: 7207690010f08f2ae526ee3300d4a18ea65997fe gitTreeState: clean gitVersion: v4.2.11 goVersion: go1.12.8 major: "" minor: "" platform: linux/amd64 serverVersion: buildDate: "2019-12-02T08:30:15Z" compiler: gc gitCommit: d4cacc0 gitTreeState: clean gitVersion: v1.11.0+d4cacc0 goVersion: go1.10.8 major: "1" minor: 11+ platform: linux/amd64 As normal user: [zhouying@dhcp-140-138 ~]$ oc get SecurityContextConstraints restricted -o name Error from server (Forbidden): securitycontextconstraints "restricted" is forbidden: User "testuser1" cannot get securitycontextconstraints at the cluster scope: no RBAC policy matched After assinged the cluster-admin role: [zhouying@dhcp-140-138 ~]$ oc get SecurityContextConstraints restricted -o name securitycontextconstraints.security.openshift.io/restricted
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0014