When redeploying EFK certificates in OpenShift's logging stack, it fails in task "Checking current health for logging-es cluster"

Solution Verified - Updated -


  • When trying to redeploy EFK stack certificates in OpenShift 3 by running the openshift-logging/redeploy-certificates.yml playbook, the following error is faced:

    TASK [Checking current health for logging-es cluster] **********************************************************************************************************************
    Tuesday 17 December 2019  15:20:18 -0600 (0:00:01.166)       0:00:41.835 ******
    fatal: [node.example.com]: FAILED! => {"changed": true, "cmd": ["oc", "exec", "-c", "elasticsearch", "logging-es-data-master-jdthri14-19-9nzlw", "-n", "logging", "--", "es_util", "--query=_cluster/health?pretty"], "delta": "0:00:00.641327", "end": "2019-12-17 15:20:19.490593", "msg": "non-zero return code", "rc": 35, "start": "2019-12-17 15:20:18.849266", "stderr": "command terminated with exit code 35", "stderr_lines": ["command terminated with exit code 35"], "stdout": "", "stdout_lines": []}
  • EFK internal logging certificates are not renewed


  • Red Hat OpenShift Container Platform (RHOCP)
    • >=3.9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content