Unauthorized node "xxx.xxx.xxx." not found

Solution Verified - Updated -

Issue

  • Only one node is not working, with a "NotReady" status.

  • Kubelet service log shows lots of messages:

    Rotating certificates
Failed while requesting a signed certificate from the master: cannot create certificate signing request: Unauthorized
node "workerx.xxx.xxx.com" not found
Failed to contact API server when waiting for CSINode publishing: csinodes.storage.k8s.io "workerx.xxx.xxx.com" is forbidden: User "system:anonymous" cannot get resource "csinodes" in API group "storage.k8s.io" at the cluster scope

  • Expired or mismatched node certificates, but there are no Pending CSRs.

  • How to recreate Node Certificates?

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content