Ceph » Orchestrator

I'm trying to upgrade cluster from 15.2.8 to 15.2.9 by running

ceph orch upgrade start --ceph-version 15.2.9

Some seconds later upgrade status shows failure:

ceph orch upgrade status 
{
    "target_image": "docker.io/ceph/ceph:v15.2.9",
    "in_progress": true,
    "services_complete": [],
    "message": "Error: UPGRADE_FAILED_PULL: Upgrade: failed to pull target image" 
}

If I try manually pull the image, I receive such error:

podman pull docker.io/ceph/ceph:v15.2.9
Trying to pull docker.io/ceph/ceph:v15.2.9...
Getting image source signatures
Copying blob 008f517fda00 done  
Copying blob 7a0437f04f83 done  
Copying config dfc4830796 done  
Writing manifest to image destination
Storing signatures
  Error processing tar file(exit status 1): potentially insufficient UIDs or GIDs available in user namespace (requested 0:22 for /run/utmp): Check /etc/subuid and /etc/subgid: lchown /run/utmp: invalid argument
Error: Error committing the finished image: error adding layer with blob "sha256:7a0437f04f83f084b7ed68ad9c4a4947e12fc4e1b006b38129bac89114ec3621": Error processing tar file(exit status 1): potentially insufficient UIDs or GIDs available in user namespace (requested 0:22 for /run/utmp): Check /etc/subuid and /etc/subgid: lchown /run/utmp: invalid argument

Upgrade to 15.2.8 worked flawless.

1. mon-s and mgr-s are running on CentOS 8.3
2. cephadm is configured to use non-root user, as described in doc: https://docs.ceph.com/en/latest/cephadm/operations/#configuring-a-different-ssh-user
3. in the meantime podman was upgraded from 2.0 to 2.2 (if it's related)