Skip to main content

Docker Success Center

The Docker enterprise customer portal.

Docker, Inc.

How to resolve "Error response from daemon: permission denied: owner access labels can only be modified by admin users" errors when updating stacks in UCP

Issue

If a user does not have admin permissions when updating stacks in UCP, the user might see the following error returned:

Error response from daemon: permission denied: owner access labels can only be modified by admin users 

The stack will also no longer show up when running "docker stack ls" in the command line.

Resolution

This is a known issue affecting several UCP releases including version 2.1.4. To enable the user to be able to redeploy with the stack, run the following steps.

  1. Log in to UCP either via the dashboard with an admin account, or with an admin account's client bundle via CLI.
  2. Add the com.docker.ucp.access.owner label to all services in the stack similar to the following example:
    version: "3"
    services:
      web:
        image: web
        deploy:
          labels:
            com.docker.ucp.access.owner: "user"
  3. To prevent this issue from re-occurring, the user should always include this service label in stacks deployed in the future.