Description of problem: When redeploying certs in a cluster, if the service-signer.crt is recreated due to expiring or other reasons, all secrets created based on this are no longer trusted. Steps to Reproduce: 1.oc adm ca create-signer-cert --cert="/etc/origin/master/service-signer.crt" --key="/etc/origin/master/service-signer.key" --name="/etc/origin/master/openshift-service-serving-signer" --serial=/etc/origin/master/service-signer.serial.txt --overwrite Actual results: OpenShift no longer trusts these certs. Expected results: Either some controller checking and recreating secrets created from this or a `oc adm` command that can be called that would regenerate the secrets. Additional info: Similar bugs via docs or installer that resolve this by manually asking user to recreate all secrets. https://bugzilla.redhat.com/show_bug.cgi?id=1550250 https://bugzilla.redhat.com/show_bug.cgi?id=1592303
*** This bug has been marked as a duplicate of bug 1683061 ***