question

SinghKaran-6513 avatar image
0 Votes"
SinghKaran-6513 asked Prrudram-MSFT edited

Credential lifetime exceeds the max value allowed as per assigned policy ?

When I try to create a cluster on OpenShift using a pull secret, I get the following error: "Credential lifetime exceeds the max value allowed as per assigned policy xxx-xx-xx".
Can someone help me with this ?
Thanks !!

azure-redhat-openshift
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Prrudram-MSFT avatar image
0 Votes"
Prrudram-MSFT answered Prrudram-MSFT edited

Hello @SinghKaran-6513,

Thank you for reaching out to Microsoft Q&A platform. Happy to answer your question.

Error: Credential lifetime exceeds the max value allowed as per assigned policy 'xxxx-xxxx-xxxxxxx-xxxxx-xxxxxx'.
The above error usually occurs when as it fails to create an app in Azure Active Directory. It appears there is an app management policy in your AAD.
This policy only applied to objects created after a specific time, you should see it in the error message. so you didn’t encounter this issue previously. It restricts the lifetime of secret for all service principal created under your AAD. As you may know, some of the services would create a service principal and a secret which will be expired in one year while creating a service connection using auto method. However, the policy in your AAD only allow MaxLifetime of secret to "xxxxxxx" which is less than one year or any other time period.

(If the response was helpful please don't forget to upvote and accept as answer, thank you)


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.