Red Hat Bugzilla – Bug 1440309
[3.4] Post-install, master certs signed for wrong name
Last modified: 2017-12-19 01:51:19 EST
Description of problem: After running install, the certs on one of 3 masters is signed for the wrong ip address (the ip address of a separate master) Version-Release number of selected component (if applicable): 3.4 How reproducible: Unconfirmed
Proposed fix here https://github.com/openshift/openshift-ansible/pull/3885
Example where ansible_host sorts differently from openshift_hostname, in this case oo_first_master will be master1 but openshift_ca will be master2 : [masters] master1 ansible_host=10.10.10.2 openshift_ip=10.10.10.2 openshift_public_ip=10.10.10.2 openshift_hostname=10.10.10.2 openshift_public_hostname=10.10.10.2 master2 ansible_host=10.10.10.1 openshift_ip=10.10.10.1 openshift_public_ip=10.10.10.1 openshift_hostname=10.10.10.1 openshift_public_hostname=10.10.10.1 master3 ansible_host=10.10.10.9 openshift_ip=10.10.10.9 openshift_public_ip=10.10.10.9 openshift_hostname=10.10.10.9 openshift_public_hostname=10.10.10.9
Verify this bug with openshift-ansible-3.4.82-1.git.0.c78ff1c.el7, after installation, all masters' certs were signed with correct ip address.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:1244