OpenShift oc client tls: internal error
Nov 22 2020 - 1 min read
kubectl is the Kubernetes command line interface. The oc binary in OpenShift Container Platform (OCP) offers the same capabilities as the kubectl binary, but it extends to natively support additional OCP features.
If you you are blocked to use oc client with a TLS error:
[moore@openshift ~]$ oc rsh pod-432c8f2d44
Error from server: error dialing backend: remote error: tls: internal error
You can have some certificates unapproved.
You can run this command to approve all your pending certificates:
[moore@openshift ~]$ oc get csr -o name | xargs oc adm certificate approve
certificatesigningrequest.certificates.k8s.io/csr-2447jt approved
certificatesigningrequest.certificates.k8s.io/csr-2h7tp approved
...
It could fix your rsh command:
[moore@openshift ~]$ oc rsh pod-432c8f2d44
sh-4.4# cat /etc/redhat-release
Red Hat Enterprise Linux release 8.2 (Ootpa)