TLS errors reported after Aggregated Logging Stack update in OpenShift Container Platform 4
Issue
-
On one of our cluster, the EFK stack (after updating the channel to version 4.5) is not working properly and the logs mostly shows TLS errors between the pods (fluentd, kibana, elastic).
http: TLS handshake error from 10.1.1.2:41752: tls: failed to verify client's certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "openshift-cluster-logging-signer")
Environment
- Red Hat OpenShift Container Platform (RHOCP) 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.