[root@rh101-node2:~]# rpm -q pacemaker
pacemaker-3.0.1-812.7568885bf4.git.el10.x86_64


[root@rh101-node2:~]# pcs cluster cib
<cib admin_epoch="0" epoch="8" num_updates="4" validate-with="pacemaker-3.1" cib-last-written="Thu Nov 27 13:59:23 2025" update-origin="rh101-node2" update-client="root" update-user="root" crm_feature_set="3.20.5" have-quorum="1" dc-uuid="2">
  <configuration>
    <crm_config>
      <cluster_property_set id="cib-bootstrap-options">
        <nvpair id="cib-bootstrap-options-fencing-watchdog-tim" name="fencing-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-stonith-watchdog-tim" name="stonith-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-dc-version" name="dc-version" value="3.0.1-812.7568885bf4.git.el10-7568885bf4"/>
        <nvpair id="cib-bootstrap-options-cluster-infrastructure" name="cluster-infrastructure" value="corosync"/>
        <nvpair id="cib-bootstrap-options-have-watchdog" name="have-watchdog" value="false"/>
        <nvpair id="cib-bootstrap-options-cluster-name" name="cluster-name" value="test-cluster"/>
      </cluster_property_set>
    </crm_config>
    <nodes>
      <node id="1" uname="rh101-node2"/>
      <node id="2" uname="rh101-node3"/>
    </nodes>
    <resources>
      <primitive id="not-for-operator" class="ocf" type="Dummy" provider="pacemaker">
        <operations>
          <op name="migrate_from" interval="0s" timeout="20s" id="not-for-operator-migrate_from-interval-0s"/>
          <op name="migrate_to" interval="0s" timeout="20s" id="not-for-operator-migrate_to-interval-0s"/>
          <op name="monitor" interval="10s" timeout="20s" id="not-for-operator-monitor-interval-10s"/>
          <op name="reload" interval="0s" timeout="20s" id="not-for-operator-reload-interval-0s"/>
          <op name="reload-agent" interval="0s" timeout="20s" id="not-for-operator-reload-agent-interval-0s"/>
          <op name="start" interval="0s" timeout="20s" id="not-for-operator-start-interval-0s"/>
          <op name="stop" interval="0s" timeout="20s" id="not-for-operator-stop-interval-0s"/>
        </operations>
      </primitive>
    </resources>
    <constraints>
      <rsc_location id="location-not-for-operator-rh101-node2-INFINITY" rsc="not-for-operator" node="rh101-node2" score="INFINITY"/>
    </constraints>
    <acls>
      <acl_role id="operator" description="HA cluster operator">
        <acl_permission id="operator-write" kind="write" xpath="//crm_config//nvpair[@name='maintenance-mode']"/>
        <acl_permission id="operator-deny" kind="deny" reference="not-for-operator"/>
      </acl_role>
      <acl_role id="administrator">
        <acl_permission id="administrator-write" kind="write" xpath="/cib"/>
      </acl_role>
      <acl_role id="empty"/>
      <acl_target id="alice">
        <role id="operator"/>
        <role id="administrator"/>
      </acl_target>
      <acl_target id="bob"/>
      <acl_group id="admins">
        <role id="administrator"/>
      </acl_group>
    </acls>
  </configuration>
  <status>
    <node_state id="1" uname="rh101-node2" in_ccm="1764248286" crmd="1764248287" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="1">
        <instance_attributes id="status-1">
          <nvpair id="status-1-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="1">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node2" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="8" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
    <node_state id="2" uname="rh101-node3" in_ccm="1764248286" crmd="1764248286" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="2">
        <instance_attributes id="status-2">
          <nvpair id="status-2-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="2">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node3" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="11" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
  </status>
</cib>


[root@rh101-node2:~]# cibadmin -VVVVV --force --delete-all --xpath '/cib/configuration/*[not(
  self::crm_config or
  self::nodes or
  self::resources or
  self::constraints
)]
| /cib/configuration/*[self::resources or self::constraints]/*
| /cib/configuration/nodes/*/*
| /cib/configuration/crm_config//nvpair[not(
  @name="cluster-infrastructure" or
  @name="cluster-name" or
  @name="dc-version" or
  @name="have-watchdog" or
  @name="last-lrm-refresh" or
  @name="stonith-watchdog-timeout" or
  @name="fencing-watchdog-timeout"
)]'
(cib_native_signon)     info: Successfully connected to CIB manager for cibadmin
(cib_native_perform_op_delegate)        warning: Call failed: Update does not conform to the configured schema
element rsc_location: validity error : IDREF attribute rsc references an unknown ID "not-for-operator"
element acl_permission: validity error : IDREF attribute reference references an unknown ID "not-for-operator"
<cib admin_epoch="0" epoch="9" num_updates="0" validate-with="pacemaker-3.1" cib-last-written="Thu Nov 27 14:27:46 2025" update-origin="rh101-node2" update-client="root" update-user="root" crm_feature_set="3.20.5" have-quorum="1" dc-uuid="2">
  <configuration>
    <crm_config>
      <cluster_property_set id="cib-bootstrap-options">
        <nvpair id="cib-bootstrap-options-fencing-watchdog-tim" name="fencing-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-stonith-watchdog-tim" name="stonith-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-dc-version" name="dc-version" value="3.0.1-812.7568885bf4.git.el10-7568885bf4"/>
        <nvpair id="cib-bootstrap-options-cluster-infrastructure" name="cluster-infrastructure" value="corosync"/>
        <nvpair id="cib-bootstrap-options-have-watchdog" name="have-watchdog" value="false"/>
        <nvpair id="cib-bootstrap-options-cluster-name" name="cluster-name" value="test-cluster"/>
      </cluster_property_set>
    </crm_config>
    <nodes>
      <node id="1" uname="rh101-node2"/>
      <node id="2" uname="rh101-node3"/>
    </nodes>
    <resources/>
    <constraints>
      <rsc_location id="location-not-for-operator-rh101-node2-INFINITY" rsc="not-for-operator" node="rh101-node2" score="INFINITY"/>
    </constraints>
    <acls>
      <acl_role id="operator" description="HA cluster operator">
        <acl_permission id="operator-write" kind="write" xpath="//crm_config//nvpair[@name='maintenance-mode']"/>
        <acl_permission id="operator-deny" kind="deny" reference="not-for-operator"/>
      </acl_role>
      <acl_role id="administrator">
        <acl_permission id="administrator-write" kind="write" xpath="/cib"/>
      </acl_role>
      <acl_role id="empty"/>
      <acl_target id="alice">
        <role id="operator"/>
        <role id="administrator"/>
      </acl_target>
      <acl_target id="bob"/>
      <acl_group id="admins">
        <role id="administrator"/>
      </acl_group>
    </acls>
  </configuration>
  <status>
    <node_state id="1" uname="rh101-node2" in_ccm="1764248286" crmd="1764248287" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="1">
        <instance_attributes id="status-1">
          <nvpair id="status-1-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="1">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node2" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="8" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
    <node_state id="2" uname="rh101-node3" in_ccm="1764248286" crmd="1764248286" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="2">
        <instance_attributes id="status-2">
          <nvpair id="status-2-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="2">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node3" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="11" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
  </status>
</cib>
cibadmin: CIB API call failed: Update does not conform to the configured schema
(crm_exit)      info: Exiting cibadmin | with status 78 (CRM_EX_CONFIG: Invalid configuration)
[root@rh101-node2:~]# echo $?
78


[root@rh101-node2:~]# pcs cluster cib
<cib admin_epoch="0" epoch="8" num_updates="4" validate-with="pacemaker-3.1" cib-last-written="Thu Nov 27 13:59:23 2025" update-origin="rh101-node2" update-client="root" update-user="root" crm_feature_set="3.20.5" have-quorum="1" dc-uuid="2">
  <configuration>
    <crm_config>
      <cluster_property_set id="cib-bootstrap-options">
        <nvpair id="cib-bootstrap-options-fencing-watchdog-tim" name="fencing-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-stonith-watchdog-tim" name="stonith-watchdog-timeout" value="0"/>
        <nvpair id="cib-bootstrap-options-dc-version" name="dc-version" value="3.0.1-812.7568885bf4.git.el10-7568885bf4"/>
        <nvpair id="cib-bootstrap-options-cluster-infrastructure" name="cluster-infrastructure" value="corosync"/>
        <nvpair id="cib-bootstrap-options-have-watchdog" name="have-watchdog" value="false"/>
        <nvpair id="cib-bootstrap-options-cluster-name" name="cluster-name" value="test-cluster"/>
      </cluster_property_set>
    </crm_config>
    <nodes>
      <node id="1" uname="rh101-node2"/>
      <node id="2" uname="rh101-node3"/>
    </nodes>
    <resources>
      <primitive id="not-for-operator" class="ocf" type="Dummy" provider="pacemaker">
        <operations>
          <op name="migrate_from" interval="0s" timeout="20s" id="not-for-operator-migrate_from-interval-0s"/>
          <op name="migrate_to" interval="0s" timeout="20s" id="not-for-operator-migrate_to-interval-0s"/>
          <op name="monitor" interval="10s" timeout="20s" id="not-for-operator-monitor-interval-10s"/>
          <op name="reload" interval="0s" timeout="20s" id="not-for-operator-reload-interval-0s"/>
          <op name="reload-agent" interval="0s" timeout="20s" id="not-for-operator-reload-agent-interval-0s"/>
          <op name="start" interval="0s" timeout="20s" id="not-for-operator-start-interval-0s"/>
          <op name="stop" interval="0s" timeout="20s" id="not-for-operator-stop-interval-0s"/>
        </operations>
      </primitive>
    </resources>
    <constraints>
      <rsc_location id="location-not-for-operator-rh101-node2-INFINITY" rsc="not-for-operator" node="rh101-node2" score="INFINITY"/>
    </constraints>
    <acls>
      <acl_role id="operator" description="HA cluster operator">
        <acl_permission id="operator-write" kind="write" xpath="//crm_config//nvpair[@name='maintenance-mode']"/>
        <acl_permission id="operator-deny" kind="deny" reference="not-for-operator"/>
      </acl_role>
      <acl_role id="administrator">
        <acl_permission id="administrator-write" kind="write" xpath="/cib"/>
      </acl_role>
      <acl_role id="empty"/>
      <acl_target id="alice">
        <role id="operator"/>
        <role id="administrator"/>
      </acl_target>
      <acl_target id="bob"/>
      <acl_group id="admins">
        <role id="administrator"/>
      </acl_group>
    </acls>
  </configuration>
  <status>
    <node_state id="1" uname="rh101-node2" in_ccm="1764248286" crmd="1764248287" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="1">
        <instance_attributes id="status-1">
          <nvpair id="status-1-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="1">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;1:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node2" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="8" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
    <node_state id="2" uname="rh101-node3" in_ccm="1764248286" crmd="1764248286" crm-debug-origin="controld_update_resource_history" join="member" expected="member">
      <transient_attributes id="2">
        <instance_attributes id="status-2">
          <nvpair id="status-2-.feature-set" name="#feature-set" value="3.20.5"/>
        </instance_attributes>
      </transient_attributes>
      <lrm id="2">
        <lrm_resources>
          <lrm_resource id="not-for-operator" class="ocf" provider="pacemaker" type="Dummy">
            <lrm_rsc_op id="not-for-operator_last_0" operation_key="not-for-operator_monitor_0" operation="monitor" crm-debug-origin="controld_update_resource_history" crm_feature_set="3.20.5" transition-key="2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" transition-magic="0:7;2:2:7:1981a93b-f97c-4195-b382-d68383f4c6f5" exit-reason="" on_node="rh101-node3" call-id="5" rc-code="7" op-status="0" interval="0" last-rc-change="1764248363" exec-time="11" queue-time="0" op-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-force-restart="  state  " op-restart-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8" op-secure-params="  passwd  " op-secure-digest="f2317cad3d54cec5d7d7aa7d0bf35cf8"/>
          </lrm_resource>
        </lrm_resources>
      </lrm>
    </node_state>
  </status>
</cib>