Chapter 6. Installing Red Hat OpenShift 3.11 on IBM PowerVC 157
13.Update the config.yaml file:
14.The installer fails trying to create multicluster-hub-security-advisor-onboarding-xxxx 
on the worker node. To prevent this failure, mark the worker Nodes as unschedulable:
# A list of OpenShift nodes that used to run ICP components
cluster_nodes:
  master:
    - mstnode01.domain.example.com
  proxy:
    - mstnode01.domain.example.com
  management:
    - mstnode01.domain.example.com
  va:
    - mstnode01.domain.example.com
storage_class: ibm-powervc-k8s-volume-default
default_admin_password: <password>
password_rules: 
    - '(.*)'
ingress_http_port: 3080 
ingress_https_port: 3443
oc  get events --all-namespaces | grep multicluster-hub-security-advisor
kube-system                        39m       39m       1         
multicluster-hub-security-advisor-onboarding-pndbt.15db965a517cb822   Pod                                                                                     
Normal    Scheduled                 default-scheduler                                                         
Successfully assigned kube-system/multicluster-hub-security-advisor-onboarding-pndbt to 
wrknode02.domain.example.com
kube-system                        39m       39m       1         
multicluster-hub-security-advisor-onboarding.15db965a5137ad18         Job                                                                                     
Normal    SuccessfulCreate          job-controller                                                            
Created pod: multicluster-hub-security-advisor-onboarding-pndbt
kube-system                        38m       38m       6         
multicluster-hub-security-advisor-onboarding-pndbt.15db965ef3c989bd   Pod                     
spec.containers{multicluster-hub-security-advisor-onboarding}   Warning   Failed                    kubelet, 
wrknode02.domain.example.com                                    Error: secrets "icp-serviceid-apikey-secret" not 
found
oc get nodes
NAME                            STATUS    ROLES                  AGE       VERSION
mstnode01.domain.example.com   Ready     compute,infra,master   13h       
v1.11.0+d4cacc0
wrknode01.domain.example.com   Ready     compute                13h       
v1.11.0+d4cacc0
wrknode02.domain.example.com   Ready     compute                13h       
v1.11.0+d4cacc0
oc adm manage-node  wrknode01.domain.example.com  --schedulable=false
NAME                            STATUS                     ROLES     AGE       VERSION
wrknode01.domain.example.com   Ready,SchedulingDisabled   compute   2h        
v1.11.0+d4cacc0
oc adm manage-node  wrknode02.domain.example.com  --schedulable=false
NAME                            STATUS                     ROLES     AGE       VERSION
wrknode02.domain.example.com   Ready,SchedulingDisabled   compute   2h        
v1.11.0+d4cacc0