"No valid client certificate is found but the server is not responsive" error in Red Hat OpenShift 4
Issue
- Node becomes NotReady
-
Kubelet log has following errors
Feb 18 08:07:29 nodename hyperkube[3602]: E0218 08:07:29.963621 3602 transport.go:112] "No valid client certificate is found but the server is not responsive. A restart may be necessary to retrieve new initial credentials." lastCertificateAvailabilityTime="2022-02-16 08:50:28.943096211 +0000 UTC m=+0.345942418" shutdownThreshold="5m0s" Feb 18 08:07:30 nodename hyperkube[3602]: I0218 08:07:30.026075 3602 csi_plugin.go:1057] Failed to contact API server when waiting for CSINode publishing: csinodes.storage.k8s.io "nodename" is forbidden: User "system:anonymous" cannot get resource "csinodes" in API group "storage.k8s.io" at the cluster scope Feb 18 08:07:30 nodename hyperkube[3602]: E0218 08:07:30.027093 3602 kubelet.go:2435] "Error getting node" err="node \"nodename\" not found"
Environment
- Red Hat OpenShift Container Platform (RHOCP) 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.