OpenShift 4 UPI installation fails with "x509: certificate has expired or is not yet valid" error

Solution Verified - Updated -

Issue

  • OpenShift 4 UPI installation fails due to certificate error when connecting to Kubernetes API.
$ openshift-install wait-for bootstrap-complete --log-level debug
DEBUG OpenShift Installer 4.10.32
DEBUG Built from commit 3948d1fe9f04057823b871133085d602e6575067
INFO Waiting up to 20m0s for the Kubernetes API at https://api.cluster.example.com:6443...
DEBUG Still waiting for the Kubernetes API: an error on the server ("") has prevented the request from succeeding
DEBUG Still waiting for the Kubernetes API: Get "https://api.cluster.example.com:6443/version?timeout=32s": x509: certificate has expired or is not yet valid: current time 2022-10-01T04:23:36-04:00 is after 2022-09-29T14:26:47Z

Environment

  • Red Hat OpenShift Container Platform (OCP)
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content