INFO: Log in to your Red Hat account... INFO: Configure AWS Credentials... WARN: The current version (1.2.59) is not up to date with latest rosa cli released version (1.2.60). WARN: It is recommended that you update to the latest version. INFO: Logged in as 'rhtap-shared' on 'https://api.openshift.com' INFO: Create ROSA with HCP cluster... WARN: The current version (1.2.59) is not up to date with latest rosa cli released version (1.2.60). WARN: It is recommended that you update to the latest version. INFO: Creating cluster 'kx-d93ba430cc' INFO: To view a list of clusters and their status, run 'rosa list clusters' INFO: Cluster 'kx-d93ba430cc' has been created. INFO: Once the cluster is installed you will need to add an Identity Provider before you can login into the cluster. See 'rosa create idp --help' for more information. Name: kx-d93ba430cc Domain Prefix: kx-d93ba430cc Display Name: kx-d93ba430cc ID: 2o8971i5hgaat41hgsdpie28a780j9ps External ID: 11d5bf19-14cd-474a-a2b9-f2e22c36af9c Control Plane: ROSA Service Hosted OpenShift Version: 4.18.9 Channel Group: stable DNS: Not ready AWS Account: 381492310364 AWS Billing Account: 381492310364 API URL: Console URL: Region: us-east-1 Availability: - Control Plane: MultiAZ - Data Plane: MultiAZ Nodes: - Compute (desired): 3 - Compute (current): 0 Network: - Type: OVNKubernetes - Service CIDR: 172.30.0.0/16 - Machine CIDR: 10.0.0.0/16 - Pod CIDR: 10.128.0.0/14 - Host Prefix: /23 - Subnets: subnet-0208a6297964e4fe1, subnet-0c161c939f7025e15, subnet-023e5c7b3016ed194, subnet-02dbd8abbf884d77f, subnet-0360c2d20442c5ba5, subnet-0aad9c992e402a91a EC2 Metadata Http Tokens: optional Role (STS) ARN: arn:aws:iam::381492310364:role/rhads-hcp-HCP-ROSA-Installer-Role Support Role ARN: arn:aws:iam::381492310364:role/rhads-hcp-HCP-ROSA-Support-Role Instance IAM Roles: - Worker: arn:aws:iam::381492310364:role/rhads-hcp-HCP-ROSA-Worker-Role Operator IAM Roles: - arn:aws:iam::381492310364:role/rhads-hcp-kube-system-kms-provider - arn:aws:iam::381492310364:role/rhads-hcp-openshift-image-registry-installer-cloud-credentials - arn:aws:iam::381492310364:role/rhads-hcp-openshift-ingress-operator-cloud-credentials - arn:aws:iam::381492310364:role/rhads-hcp-openshift-cluster-csi-drivers-ebs-cloud-credentials - arn:aws:iam::381492310364:role/rhads-hcp-openshift-cloud-network-config-controller-cloud-creden - arn:aws:iam::381492310364:role/rhads-hcp-kube-system-kube-controller-manager - arn:aws:iam::381492310364:role/rhads-hcp-kube-system-capa-controller-manager - arn:aws:iam::381492310364:role/rhads-hcp-kube-system-control-plane-operator Managed Policies: Yes State: waiting (Waiting for user action) Private: No Delete Protection: Disabled Created: Feb 4 2026 06:05:12 UTC Details Page: https://console.redhat.com/openshift/details/s/39C1ChfuaCBf2Jsc8i6LY1g6v48 OIDC Endpoint URL: https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j (Managed) Etcd Encryption: Disabled Audit Log Forwarding: Disabled External Authentication: Disabled Zero Egress: Disabled INFO: Preparing to create operator roles. INFO: Operator Roles already exists INFO: Preparing to create OIDC Provider. INFO: OIDC provider already exists INFO: To determine when your cluster is Ready, run 'rosa describe cluster -c kx-d93ba430cc'. INFO: To watch your cluster installation logs, run 'rosa logs install -c kx-d93ba430cc --watch'. INFO: Track the progress of the cluster creation... WARN: The current version (1.2.59) is not up to date with latest rosa cli released version (1.2.60). WARN: It is recommended that you update to the latest version. W: Region flag will be removed from this command in future versions INFO: Cluster 'kx-d93ba430cc' is in waiting state waiting for installation to begin. Logs will show up within 5 minutes 0001-01-01 00:00:00 +0000 UTC hostedclusters kx-d93ba430cc Version 2026-02-04 06:16:19 +0000 UTC hostedclusters kx-d93ba430cc ValidAWSIdentityProvider StatusUnknown 2026-02-04 06:16:20 +0000 UTC certificates cluster-api-cert Issuing certificate as Secret does not exist 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Ignition server deployment not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc ValidConfiguration condition is false: NamedCertificates get secret: Invalid value: "cluster-api-cert": Secret "cluster-api-cert" not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Condition not found in the CVO. 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Condition not found in the CVO. 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Condition not found in the CVO. 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Condition not found in the CVO. 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Condition not found in the CVO. 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc NamedCertificates get secret: Invalid value: "cluster-api-cert": Secret "cluster-api-cert" not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc HostedCluster is supported by operator configuration 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Release image is valid 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc Reconciliation active on resource 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc configuration is invalid: NamedCertificates get secret: Invalid value: "cluster-api-cert": Secret "cluster-api-cert" not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc The hosted control plane is not found 2026-02-04 06:16:22 +0000 UTC hostedclusters kx-d93ba430cc ValidConfiguration condition is false: NamedCertificates get secret: Invalid value: "cluster-api-cert": Secret "cluster-api-cert" not found 2026-02-04 06:16:23 +0000 UTC certificates cluster-api-cert The certificate request has failed to complete and will be retried: Failed to wait for order resource "cluster-api-cert-1-2507000888" to become ready: order is in "errored" state: Failed to fetch authorization: 404 urn:ietf:params:acme:error:malformed: No such authorization INFO: ROSA with HCP cluster is ready, create a cluster admin account for accessing the cluster WARN: The current version (1.2.59) is not up to date with latest rosa cli released version (1.2.60). WARN: It is recommended that you update to the latest version. ERR: Cluster 'kx-d93ba430cc' is not yet ready