Related Tips & Info

Support Tip: "Could not issue certificates" error and cluster pods go down

JRoth
0 Likes

Many pods are in Status Crashloopback off. By default, the CDF root CA certificate is valid for 10 years. When you set the issue certificates TTL to 10 years, the issued certificates soon have an end date that's after the root CA certificate end date. In this situation, OpenSSL returns an error when you try to issue a certificate, and most of the pods in the cluster will go down with a certificate issuance error.

Read the resolution for this issue and the full Support Tip here.

Labels:

Knowledge Docs
Comment List
Related
Recommended

Resources

Support
Documentation
Learning Services
CyberRes Academy
Partner Programs
Contact us
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Conduct
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.