When redeploying EFK certificates in OpenShift's logging stack, it fails in task "Checking current health for logging-es cluster"

Solution Verified - Updated -


Trying to redeploy EFK certificates in OpenShift's logging stack (running the openshift-logging/redeploy-certificates.yml playbook) stops with message:

TASK [Checking current health for logging-es cluster] **********************************************************************************************************************
Tuesday 17 December 2019  15:20:18 -0600 (0:00:01.166)       0:00:41.835 ******
fatal: [node.example.com]: FAILED! => {"changed": true, "cmd": ["oc", "exec", "-c", "elasticsearch", "logging-es-data-master-jdthri14-19-9nzlw", "-n", "logging", "--", "es_util", "--query=_cluster/health?pretty"], "delta": "0:00:00.641327", "end": "2019-12-17 15:20:19.490593", "msg": "non-zero return code", "rc": 35, "start": "2019-12-17 15:20:18.849266", "stderr": "command terminated with exit code 35", "stderr_lines": ["command terminated with exit code 35"], "stdout": "", "stdout_lines": []}

And the internal logging certificates are not renewed.


  • Red Hat OpenShift Container Platform (RHOCP)
    • 3.11
    • 3.10
    • 3.9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In