authentication operator failing with RouterCerts_InvalidServerCertRouterCerts

Posted on

Hello,
I have a OCP 4.11.59. A few days ago the default ingress cert expired. We updated it with a new one. But the authentication operator keeps failing with:

RouterCertsDegraded: secret/v4-0-config-system-router-certs.spec.data[apps.mydomain] -n openshift-authentication: certificate could not validate route hostname oauth-openshift.apps.mydomain: x509: certificate has expired or is not yet valid: current time 2024-06-28T16:04:44Z is after 2024-06-22T20:58:19Z.

But if I check the secret v4-0-config-system-router-certs, it has the new cert and if I check the oauth pods I can see that is reading the new cert with the new dates, 2024 to 2026.

I've refreshed the secret anyways and also deleted de oauth pods just to be sure, but same error.

Is there another secret that may have the old version?

Regards,

FT

Responses