Issue with cert in cluster-bootstrap container (possibly?)

[aheath1992]

When trying to setup a cluster im getting a buck of cert errors when its trying to connect to the temporary bootstrap control plane, not sure if a cert with in the 4.15.0-0.okd-2024-03-10-010116-cluster-bootstrap(sha256:9f3f8f11fd743a332f8328b774bed1854c5d5d058663eb122289191bcb0cee73) container has expired and needs to be renewed or if it's a user error but here is an example.

ul 18 17:51:32 localhost.localdomain cluster-bootstrap[3617]: Starting temporary bootstrap control plane...
Jul 18 17:51:32 localhost.localdomain bootkube.sh[3570]: Starting temporary bootstrap control plane...
Jul 18 17:51:32 localhost.localdomain cluster-bootstrap[3617]: Waiting up to 20m0s for the Kubernetes API
Jul 18 17:51:32 localhost.localdomain bootkube.sh[3570]: Waiting up to 20m0s for the Kubernetes API
Jul 18 17:51:33 localhost.localdomain cluster-bootstrap[3617]: Still waiting for the Kubernetes API: Get "https://localhost:6443/readyz": dial tcp [::1]:6443: connect: connection refused 
Jul 18 17:51:33 localhost.localdomain bootkube.sh[3570]: Still waiting for the Kubernetes API: Get "https://localhost:6443/readyz": dial tcp [::1]:6443: connect: connection refused
Jul 18 17:51:49 localhost.localdomain cluster-bootstrap[3617]: API is up
Jul 18 17:51:49 localhost.localdomain bootkube.sh[3570]: API is up
Jul 18 17:51:49 localhost.localdomain cluster-bootstrap[3617]: W0718 17:51:49.807134       1 reflector.go:533] github.com/openshift/cluster-bootstrap/pkg/start/status.go:127: failed to list *v1.Pod: Get "https://localhost:6443/api/v1/pods": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-18T17:51:49Z is after 2024-07-17T17:19:21Z
Jul 18 17:51:49 localhost.localdomain bootkube.sh[3570]: W0718 17:51:49.807134       1 reflector.go:533] github.com/openshift/cluster-bootstrap/pkg/start/status.go:127: failed to list *v1.Pod: Get "https://localhost:6443/api/v1/pods": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-18T17:51:49Z is after 2024-07-17T17:19:21Z
Jul 18 17:51:49 localhost.localdomain cluster-bootstrap[3617]: E0718 17:51:49.808033       1 reflector.go:148] github.com/openshift/cluster-bootstrap/pkg/start/status.go:127: Failed to watch *v1.Pod: failed to list *v1.Pod: Get "https://localhost:6443/api/v1/pods": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-18T17:51:49Z is after 2024-07-17T17:19:21Z
Jul 18 17:51:49 localhost.localdomain bootkube.sh[3570]: E0718 17:51:49.808033       1 reflector.go:148] github.com/openshift/cluster-bootstrap/pkg/start/status.go:127: Failed to watch *v1.Pod: failed to list *v1.Pod: Get "https://localhost:6443/api/v1/pods": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-07-18T17:51:49Z is after 2024-07-17T17:19:21Z

log-bundle-20240718121230.tar.gz

[aheath1992]

Please disregard, User issue

[Sulthan125]

Please how to fix this. Because i get same problem

[aheath1992]

The cert only has a 24 Hour life so you need to rebuild the Ignition files and manifest, also be sure to remove any lingering dot files in your installation directory.

./openshift-install create manifests --dir <installation_directory> 
./openshift-install create ignition-configs --dir <installation_directory>