Openshift redeploy certificates playbooks fail when expiration date is less than 365 days

Solution Verified - Updated -

Issue

All Openshift redeploy certificates playbooks fails constantly when expiration date of the current certificates is equal or less than a number of days (usually 365 days), preventing the certificates dates to be extended.

2019-03-11 15:28:07,290 p=27462 u=root |  TASK [openshift_certificate_expiry : Fail when certs are near or already expired] *********************************************************************
********************************************
2019-03-11 15:28:07,313 p=27462 u=root |  task path: /usr/share/ansible/openshift-ansible/roles/openshift_certificate_expiry/tasks/main.yml:39
2019-03-11 15:28:07,313 p=27462 u=root |  Monday 11 March 2019  15:28:07 +0100 (0:00:04.732)       0:02:34.544 ********** 
2019-03-11 15:28:07,792 p=27462 u=root |  fatal: [master1.example.com]: FAILED! => {
    "changed": false, 
    "msg": "Cluster certificates found to be expired or within 365 days of expiring. You may view the report at /root/cert-expiry-report.20190311T150314.html or /root/cert-expiry-report.2019031
1T150314.json.\n"
}
2019-03-11 15:28:07,957 p=27462 u=root |  fatal: [master2.example.com]: FAILED! => {
    "changed": false, 
    "msg": "Cluster certificates found to be expired or within 365 days of expiring. You may view the report at /root/cert-expiry-report.20190311T150314.html or /root/cert-expiry-report.2019031
1T150314.json.\n"
}
2019-03-11 15:28:08,610 p=27462 u=root |  fatal: [master3.example.com]: FAILED! => {
    "changed": false, 
    "msg": "Cluster certificates found to be expired or within 365 days of expiring. You may view the report at /root/cert-expiry-report.20190311T150314.html or /root/cert-expiry-report.2019031
1T150314.json.\n"
}

Environment

Openshift Container Platform 3.11

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content