Node is stuck in NotReady state in RHOCP 4

Solution Verified - Updated -

Issue

  • The node is reporting a NotReady status.
  • The journal logs for the NotReady node indicate the following errors:

    Jan 25 15:49:21 node1.example.com kubenswrapper[1898]: E0125 15:49:21.911455    1898 kubelet.go:2471] "Error getting node" err="node \"node1.example.com\" not found"
    Jan 25 15:49:21 node1.example.com kubenswrapper[1898]: I0125 15:49:21.971710    1898 csi_plugin.go:1032] Failed to contact API server when waiting for CSINode publishing: csinodes.storage.k8s.io     "node1.example.com" is forbidden: User "system:anonymous" cannot get resource "csinodes" in API group "storage.k8s.io" at the cluster scope
    Jan 25 15:49:22 node1.example.com kubenswrapper[1898]: E0125 15:49:22.012264    1898 kubelet.go:2471] "Error getting node" err="node \"node1.example.com\" not found"
    
  • The kubelet logs for the NotReady node indicate the following errors:

    Feb 10 01:20:18 node1.example.com kubenswrapper[1480]: I0210 01:20:18.354885    1480 certificate_manager.go:341] kubernetes.io/kube-apiserver-client-kubelet: Current certificate is expired
    Feb 10 01:20:18 node1.example.com kubenswrapper[1480]: E0210 01:20:18.354983    1480 transport.go:148] "No valid client certificate is found but the server is not responsive. A restart may be necessary to retrieve new initial credentials. "lastCertificateAvailabilityTime="YYYY-MM-DD HH:mm:ss" shutdownThreshold="10m0s"
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP) 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content