Jenkins Pipeline fails with "CertificateExpiredException"
Issue
-
When using a
BuildConfig
withjenkinsPipelineStrategy
, running the build fails with the following error message:com.openshift.restclient.OpenShiftException: Unable to initialize client at com.openshift.restclient.ClientBuilder.build(ClientBuilder.java:250) at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.getClient(IOpenShiftPlugin.java:164) at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.getClient(IOpenShiftPlugin.java:150) at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftDeployer.coreLogic(IOpenShiftDeployer.java:45) at com.openshift.jenkins.plugins.pipeline.model.IOpenShiftPlugin.doItCore(IOpenShiftPlugin.java:359) at com.openshift.jenkins.plugins.pipeline.dsl.OpenShiftDeployerExecution.run(OpenShiftDeployerExecution.java:45) at com.openshift.jenkins.plugins.pipeline.dsl.OpenShiftDeployerExecution.run(OpenShiftDeployerExecution.java:17) at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1$1.call(AbstractSynchronousNonBlockingStepExecution.java:47) at hudson.security.ACL.impersonate(ACL.java:367) at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1.run(AbstractSynchronousNonBlockingStepExecution.java:44) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:834) Caused by: java.security.cert.CertificateExpiredException: NotAfter: Wed Mar 15 12:40:46 UTC 2021 at java.base/sun.security.x509.CertificateValidity.valid(CertificateValidity.java:277) at java.base/sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:675) at java.base/sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:648) at com.openshift.restclient.ClientBuilder.initTrustManagerFactory(ClientBuilder.java:284) at com.openshift.restclient.ClientBuilder.build(ClientBuilder.java:199) ... 14 more
-
Java applications in or outside the OpenShift Container Platform cluster fail with a
CertificateExpiredException
when trying to communicate with the cluster API.
Environment
- Red Hat OpenShift Container Platform (OCP) 3.11
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.