Checking the certificate expiry date
IMPORTANT:
Check the expiry date of service and CSR certificates by running the commands in the following step. If there is a plan to start the system post expiry date, perform Regenerating certificates else ignore this section and proceed to Shutting down the worker nodes and master nodes.
Procedure
To check the expire date of service and CSR certificates, run the following commands:
oc get secrets/signing-key -n openshift-service-ca -o template='{{index .data "tls.crt"}}' | base64 -d | openssl x509 -noout -enddateoc get secrets/csr-signer-signer -n openshift-kube-controller-manager-operator -o template='{{index .data "tls.crt"}}' | base64 -d | openssl x509 -noout -enddateoc get secrets/csr-signer -n openshift-kube-controller-manager-operator -o template='{{index .data "tls.crt"}}' | base64 -d | openssl x509 -noout -enddate