title: OpenShift (Cloud) Pod STATUS: Crash Loop Back-off,changing ownership not permitted
body: <p>I created an application on existent OpenShift project by pulling a docker image from remote repo.
  The pod is created but fails with <code>STATUS "Crash Loop Back-off"</code>.
  Invesitgating the reason using </p>
  
  <pre><code>oc log &lt;pod id&gt; -p
  </code></pre>
  
  <p>it appears a list of unsuccessfull <code>"chown: changing ownership of '...': Operation not permitted</code></p>
  
  <p>I found this is due to non predictable user id running the container. 
  According to 
  <a href="https://docs.openshift.com/container-platform/3.6/admin_guide/manage_scc.html" rel="nofollow noreferrer">https://docs.openshift.com/container-platform/3.6/admin_guide/manage_scc.html</a> and various post here and there,
  it seems the solution is to relax security policy:</p>
  
  <pre><code>oc login -u system:admin https://&lt;remote openshift endpoint&gt;
  oadm policy add-scc-to-group anyuid system:authenticated
  </code></pre>
  
  <p>If this is the solution, I don't know, because I cannot get out of 1st problem: </p>
  
  <pre><code>oc login -u system:admin 
  </code></pre>
  
  <p>asks for login/pwd and after print an error</p>
  
  <pre><code>error: username system:admin is invalid for basic auth
  </code></pre>
  
  <p>I guess there is the need of a certificate, a token, something secure, but I cannot understand how to generate it from Openshift, or
  if there was a key pair to generate locally (of which kind) and how to bind the key to the user. Furthermore, checking in the web console
  I cannot see that kind of user (system:admin).</p>
  
  <p>Am I missing something?</p>
  
  <p>Thanks a lot,</p>
  
  <p>Lorenzo</p>