MongoDB Cert Renewal In 21.10 Fails Due To Rancher Webhook Certificate Expiry

Mongodb cert expired

Error Description: While using the documentation - Mongodb Manual Certificate Update to update the certificates, the Certificates do not update.

When doing a describe on the cert-manager pod, there is an error for a Webhook certificate expired.

Root Cause: MongoDB certificate and Rancher Webhook cert has expired as well.

Resolution:

  1. Execute the below commands,
  • kubectl delete secret -n cattle-system cattle-webhook-tls
  • kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io --ignore-not-found=true rancher.cattle.io
  • kubectl delete pod -n cattle-system -l app=rancher-webhook

  1. Then update the Mongodb certificate. Refer Mongodb Manual Certificate Update .