MachineConfig daemon fails with Marking Degraded due to: unexpected on-disk state validating , content mismatch for file /etc/kubernetes/kubelet-ca.crt in Red Hat OpenShift Platform 4.x

Issue

MachineConfig daemon fails with Marking Degraded due to: unexpected on-disk state validating , content mismatch for file /etc/kubernetes/kubelet-ca.crt in Red Hat OpenShift Platform 4.x

The machine-config cluster operator shows as degraded:

oc get clusteroperators
NAME                                       VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
(...)
machine-config                             4.3.5     False       False         True       15d
(...)

The machine-config-daemon pods log:

2020-05-15T08:12:09.087671755Z E0515 08:12:09.087644    3258 writer.go:130] Marking Degraded due to: unexpected on-disk state validating against rendered-<node>
2020-05-15T08:12:13.120697305Z I0515 08:12:13.120635    3258 daemon.go:724] Current+desired config: rendered-<node>
2020-05-15T08:12:13.13216444Z I0515 08:12:13.132117    3258 daemon.go:958] Validating against current config rendered-<node>
2020-05-15T08:12:13.134854655Z E0515 08:12:13.134744    3258 daemon.go:1350] content mismatch for file /etc/kubernetes/kubelet-ca.crt: -----BEGIN CERTIFICATE-----
(...)
2020-05-15T08:12:13.134854655Z -----END CERTIFICATE-----

This happened after following the expired certificate documentation in [0]

• [0] https://docs.openshift.com/container-platform/4.4/backup_and_restore/disaster_recovery/scenario-3-expired-certs.html