5.4. Recovering from expired control plane certificates

Procedure

1. Get the list of current CSRs:

   $ oc get csr

   Copy to Clipboard Toggle word wrap

2. Review the details of a CSR to verify that it is valid:

   $ oc describe csr <csr_name> 

   1

   Copy to Clipboard Toggle word wrap

   1

   <csr_name> is the name of a CSR from the list of current CSRs.

3. Approve each valid node-bootstrapper CSR:

   $ oc adm certificate approve <csr_name>

   Copy to Clipboard Toggle word wrap