Document URL: https://docs.openshift.com/container-platform/3.10/install_config/redeploying_certificates.html#redeploying-node-certificates ###### https://access.redhat.com/documentation/en-us/openshift_container_platform/3.10/html/configuring_clusters/install-config-redeploying-certificates Section Number and Name: On Red Hat: 10.3.6. Redeploying Node Certificates Only On docs.openshift.com: Redeploying Node Certificates Only Describe the issue: On Openshift 3.10 there's no longer openshift-node/redeploy-certificates.yml playbook as nodes are bootstrapped from master, you can do it manually deleting /etc/origin/node/certificates, restarting atomic-openshift-node service and signing csr with oc get csr -o name | xargs oc adm certificate approve Suggestions for improvement: Kindly request to remove this from > 3.10 to avoid unnecessary noise. Additional information:
To clarify, this playbook does not exist in 3.11 either, but the docs says it does. Please also correct the 3.11 docs. Thanks! :)
OCP 3.6-3.10 is no longer on full support [1]. Marking un-triaged bugs CLOSED DEFERRED. If you have a customer case with a support exception or have reproduced on 3.11+, please reopen and include those details. When reopening, please set the Version to the appropriate version where reproduced. [1]: https://access.redhat.com/support/policy/updates/openshift
German and Nicolas -- Can you determine if this PR, which was merged recently, addresses your concerns? https://github.com/openshift/openshift-docs/pull/18520/files Docs now state: Redeploying Node Certificates OpenShift Container Platform automatically rotates node certificates when they get close to expiring. If you need to redeploy certificates because the CA certificate was changed, you can use the playbooks/redeploy-certificates.yml playbook with the -e openshift_redeploy_openshift_ca=true flag. https://docs.openshift.com/container-platform/3.10/install_config/redeploying_certificates.html#redeploying-node-certificates I do not see a reference to `openshift-node/redeploy-certificates.yml` in the docs currently. Michael
*** This bug has been marked as a duplicate of bug 1635251 ***
As long as there are no more references to openshift-node/redeploy-certificates.yml looks good to me. Anyways, 3.10/11 is no longer supported. /LGTM Thanks.
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days