After initial OCP4.1 cluster install, regular users cannot login using oc command; x509: certificate signed by unknown authority error

Solution Verified - Updated -

Issue

Users other than system:admin are unable to log into OCP v4.1 cluster from the command line, but are able to login via the web console.

Those users, when attempting to log into a new bare-metal UPI-install on vSphere, are presented with a confusing issue when trying to access the cluster via the oc command, though the default kubeadmin user could do so with no issue. The certificate error above was the only error the presented to the user.

Environment

  • Red Hat OpenShift Container Platform 4.1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content