Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1656355

Summary: oc logs command not using the right certificate
Product: OpenShift Container Platform Reporter: Jatan Malde <jmalde>
Component: NodeAssignee: Seth Jennings <sjenning>
Status: CLOSED DUPLICATE QA Contact: Xiaoli Tian <xtian>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 3.11.0CC: aos-bugs, jcrumple, jmalde, jokerman, knakai, misalunk, mmccomas, openshift-bugs-escalate, rhowe, sgarciam, sjenning
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-12-19 17:05:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 20 Ryan Howe 2018-12-18 23:25:41 UTC 
I was able to reproduce the issue with this configurations. The issue is with out we parse the feature-gates objects.

  feature-gates:
  - ExpandPersistentVolumes=true
  - RotateKubeletClientCertificate=true,RotateKubeletServerCertificate=true

With the above the kubelet.crt cert is used over the certs that get signed by the master controller. 

Setting in the node-config.yaml and the node configmaps to the following fixed the issue: 

  feature-gates:
  - RotateKubeletClientCertificate=true,RotateKubeletServerCertificate=true


Code:
https://github.com/openshift/origin/blob/master/pkg/cmd/server/kubernetes/node/options/options.go#L100


Similar bug as well which I created it just presents itself differently: 
https://bugzilla.redhat.com/show_bug.cgi?id=1651393
Comment 22 Ryan Howe 2018-12-19 16:47:55 UTC 
I suggest closing this bug as a duplicate to  https://bugzilla.redhat.com/show_bug.cgi?id=1651393
Comment 23 Seth Jennings 2018-12-19 17:05:47 UTC 

*** This bug has been marked as a duplicate of bug 1651393 ***