Bug 1699467
| Summary: | Running redeploy CA and openshift redeploy certificates , causes all nodes to become notready. | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Joseph Callen <jcallen> |
| Component: | Installer | Assignee: | Joseph Callen <jcallen> |
| Installer sub component: | openshift-ansible | QA Contact: | Gaoyun Pei <gpei> |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | high | ||
| Priority: | unspecified | CC: | bleanhar, gpei, jdesousa, mirollin, palonsor, pdwyer, rhowe |
| Version: | 3.10.0 | ||
| Target Milestone: | --- | ||
| Target Release: | 3.10.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1652746 | Environment: | |
| Last Closed: | 2019-06-11 09:30:48 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1652746 | ||
| Bug Blocks: | |||
|
Comment 2
Joseph Callen
2019-04-15 13:08:53 UTC
In build: openshift-ansible-3.10.138-1 Verify this bug with openshift-ansible-3.10.139-1.git.0.02bc5db.el7 1. Run playbooks/openshift-master/redeploy-openshift-ca.yml to redeploy OpenShift CA cert 2. With openshift_redeploy_openshift_ca=true added in inventory file, run playbooks/redeploy-certificates.yml to redeploy the OpenShift certs After redeployment, node certs and node bootstrap.kubeconfig get recreated. Node certs were issued by the new CA, bootstrap.kubeconfig get updated with new CA. All nodes are in Ready status and all pods are running, no pending csr, move this bug to VERIFIED. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0786 |