Skip to content

Instantly share code, notes, and snippets.

@ikurni

ikurni/OCP4-Ingress-Certificate-Expired

Last active April 13, 2022 15:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ikurni/5b49105522866866bf3c21121e446dcf to your computer and use it in GitHub Desktop.
Save ikurni/5b49105522866866bf3c21121e446dcf to your computer and use it in GitHub Desktop.
Download ZIP
OCP 4 Ingress Certificate Expired after 2 Years of Deployment
Raw
OCP4-Ingress-Certificate-Expired
# After 2 years deployment, suddenly Authentication and Console Operator is degraded, and after we check the operator status, it shows that
# the certificate is expired. To solve this, just delete the secret, and Operator will create new certificate. Assume we still use
# Openshift default certificate
### Delete Ingress CA Secret
oc project openshift-ingress-operator
oc get secret router-ca -oyaml > router-ca.yaml
oc delete secret router-ca
oc delete pod --all
oc get secret router-ca
### Delete Router Cert Secret
oc project openshift-ingress
oc get secret router-certs-default -o yaml > router-certs-default.yaml
oc delete secret router-certs-default
oc delete pod --all
oc get secret router-certs-default
$ oc get po
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment