Error from server (ServiceUnavailable) and TLS handshake errors from openshift-apiserver pod

Solution In Progress - Updated -

Issue

  • Getting errors like below while looking for OCP objects

    $ oc get projects
    Error from server (ServiceUnavailable): the server is currently unable to handle the request (get projects.project.openshift.io)
    
  • Getting a huge amount of "TLS handshake errors" in openshift-apiserver pod as below

    I0915 08:07:35.705088       1 log.go:172] http: TLS handshake error from 10.128.0.1:32884: EOF
    I0915 08:07:35.706035       1 log.go:172] http: TLS handshake error from 10.128.0.1:32886: EOF
    I0915 08:07:35.706674       1 log.go:172] http: TLS handshake error from 10.128.0.1:32882: EOF
    I0915 08:07:35.706870       1 log.go:172] http: TLS handshake error from 10.128.0.1:32876: EOF
    
  • oc commands getting stuck multiple times

  • Authentication and Monitoring cluster operators are in a degraded state with similar error messages as below

    openshift-authentication-operator   88s         Normal    OperatorStatusChanged    deployment/authentication-operator                                   Status for clusteroperator/authentication changed: Degraded message changed from "OAuthClientsDegraded: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io openshift-browser-client)" to "OperatorSyncDegraded: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io openshift-challenging-client)\nOAuthClientsDegraded: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io openshift-browser-client)"
    

Environment

  • Red Hat OpenShift Container Platform 4.5

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content