From e40062317efa76bf7ec53a4763e9c979c685035c Mon Sep 17 00:00:00 2001 From: Praveen Kumar Date: Fri, 2 Jul 2021 11:29:59 +0530 Subject: [PATCH] Remove the system:openshift:openshift-authenticator csr Looks like after the cert rotation `system:openshift:openshift-authenticator` csr is not recreated and causing issue for auth operator. As a workaround we need to manually delete it so new csr is generated with updated cert info. - https://bugzilla.redhat.com/show_bug.cgi?id=1978193 --- snc.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/snc.sh b/snc.sh index 0e7d9b3df..c4fefa7dc 100755 --- a/snc.sh +++ b/snc.sh @@ -169,6 +169,10 @@ fi # Wait for install to complete, this provide another 30 mins to make resources (apis) stable ${OPENSHIFT_INSTALL} --dir ${INSTALL_DIR} wait-for install-complete ${OPENSHIFT_INSTALL_EXTRA_ARGS} +# Remove the openshift-authenticator CSR to force a certificate regeneration +# BZ: https://bugzilla.redhat.com/show_bug.cgi?id=1978193 +retry ${OC} delete csr system:openshift:openshift-authenticator + # Set the VM static hostname to crc-xxxxx-master-0 instead of localhost.localdomain HOSTNAME=$(${SSH} core@api.${CRC_VM_NAME}.${BASE_DOMAIN} hostnamectl status --transient) ${SSH} core@api.${CRC_VM_NAME}.${BASE_DOMAIN} sudo hostnamectl set-hostname ${HOSTNAME}