"No valid client certificate is found but the server is not responsive" error in Red Hat OpenShift 4

Solution Verified - Updated -

Issue

  • Node becomes NotReady
  • Kubelet log has following errors

    Feb 18 08:07:29 nodename hyperkube[3602]: E0218 08:07:29.963621    3602 transport.go:112] "No valid client certificate is found but the server is not responsive. A restart may be necessary to retrieve new initial credentials." lastCertificateAvailabilityTime="2022-02-16 08:50:28.943096211 +0000 UTC m=+0.345942418" shutdownThreshold="5m0s"
    Feb 18 08:07:30 nodename hyperkube[3602]: I0218 08:07:30.026075    3602 csi_plugin.go:1057] Failed to contact API server when waiting for CSINode publishing: csinodes.storage.k8s.io "nodename" is forbidden: User "system:anonymous" cannot get resource "csinodes" in API group "storage.k8s.io" at the cluster scope
    Feb 18 08:07:30 nodename hyperkube[3602]: E0218 08:07:30.027093    3602 kubelet.go:2435] "Error getting node" err="node \"nodename\" not found"
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP) 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content