diff --git a/modules/dr-recover-expired-control-plane-certs.adoc b/modules/dr-recover-expired-control-plane-certs.adoc index 5e2edbd3fb79..ad646e970f91 100644 --- a/modules/dr-recover-expired-control-plane-certs.adoc +++ b/modules/dr-recover-expired-control-plane-certs.adoc @@ -83,10 +83,10 @@ Follow this procedure to recover from a situation where your control plane certi .. Get the CA certificate used to validate connections from the API server. + ---- -# oc get configmap kube-apiserver-to-kubelet-client-ca -n openshift-kube-apiserver-operator --template='{{ index .data "ca-bundle.crt" }}' > /etc/kubernetes/ca.crt +# oc get configmap kube-apiserver-to-kubelet-client-ca -n openshift-kube-apiserver-operator --template='{{ index .data "ca-bundle.crt" }}' > /etc/kubernetes/kubelet-ca.crt ---- -.. Copy the `/etc/kubernetes/ca.crt` file to all other master hosts and nodes. +.. Copy the `/etc/kubernetes/kubelet-ca.crt` file to all other master hosts and nodes. . Recover the kubelet on all masters.