Unauthorized node "xxx.xxx.xxx." not found
Issue
- Only one
node
is not working, with a "NotReady" status. -
Kubelet
service log shows lots of messages:Rotating certificates Failed while requesting a signed certificate from the master: cannot create certificate signing request: Unauthorized node "workerx.xxx.xxx.com" not found Failed to contact API server when waiting for CSINode publishing: csinodes.storage.k8s.io "workerx.xxx.xxx.com" is forbidden: User "system:anonymous" cannot get resource "csinodes" in API group "storage.k8s.io" at the cluster scope
-
Expired or mismatched node
certificates
, but there are no PendingCSRs
. - How to recreate
Node
Certificates?
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.