Credential lifetime exceeds the max value allowed as per assigned policy ?

Singh, Karan 1 Reputation point
2022-02-07T21:23:23.88+00:00

When I try to create a cluster on OpenShift using a pull secret, I get the following error: "Credential lifetime exceeds the max value allowed as per assigned policy xxx-xx-xx".
Can someone help me with this ?
Thanks !!

Azure Red Hat OpenShift
Azure Red Hat OpenShift
An Azure service that provides a flexible, self-service deployment of fully managed OpenShift clusters.
70 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Prrudram-MSFT 22,056 Reputation points
    2022-02-10T05:27:21.357+00:00

    Hello @Singh, Karan ,

    Thank you for reaching out to Microsoft Q&A platform. Happy to answer your question.

    Error: Credential lifetime exceeds the max value allowed as per assigned policy 'xxxx-xxxx-xxxxxxx-xxxxx-xxxxxx'.
    The above error usually occurs when as it fails to create an app in Azure Active Directory. It appears there is an app management policy in your AAD.
    This policy only applied to objects created after a specific time, you should see it in the error message. so you didn’t encounter this issue previously. It restricts the lifetime of secret for all service principal created under your AAD. As you may know, some of the services would create a service principal and a secret which will be expired in one year while creating a service connection using auto method. However, the policy in your AAD only allow MaxLifetime of secret to "xxxxxxx" which is less than one year or any other time period.

    (If the response was helpful please don't forget to upvote and accept as answer, thank you)

    0 comments No comments