Last active
April 13, 2022 15:57
-
-
Save ikurni/5b49105522866866bf3c21121e446dcf to your computer and use it in GitHub Desktop.
OCP 4 Ingress Certificate Expired after 2 Years of Deployment
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# After 2 years deployment, suddenly Authentication and Console Operator is degraded, and after we check the operator status, it shows that | |
# the certificate is expired. To solve this, just delete the secret, and Operator will create new certificate. Assume we still use | |
# Openshift default certificate | |
### Delete Ingress CA Secret | |
oc project openshift-ingress-operator | |
oc get secret router-ca -oyaml > router-ca.yaml | |
oc delete secret router-ca | |
oc delete pod --all | |
oc get secret router-ca | |
### Delete Router Cert Secret | |
oc project openshift-ingress | |
oc get secret router-certs-default -o yaml > router-certs-default.yaml | |
oc delete secret router-certs-default | |
oc delete pod --all | |
oc get secret router-certs-default | |
$ oc get po |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment