---
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
  annotations:
    exclude.release.openshift.io/internal-openshift-hosted: "true"
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
  creationTimestamp: "2025-10-27T11:18:36Z"
  generation: 1
  labels:
    prometheus: k8s
    role: alert-rules
  managedFields:
  - apiVersion: monitoring.coreos.com/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:exclude.release.openshift.io/internal-openshift-hosted: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:include.release.openshift.io/single-node-developer: {}
        f:labels:
          .: {}
          f:prometheus: {}
          f:role: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"d36bdf59-d268-4238-afb0-5e0b21cca1a4"}: {}
      f:spec:
        .: {}
        f:groups:
          .: {}
          k:{"name":"cluster-machine-approver.rules"}:
            .: {}
            f:name: {}
            f:rules: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-10-27T11:18:36Z"
  name: machineapprover-rules
  namespace: openshift-cluster-machine-approver
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    controller: true
    kind: ClusterVersion
    name: version
    uid: d36bdf59-d268-4238-afb0-5e0b21cca1a4
  resourceVersion: "1724"
  uid: 9f38ac46-e66b-405a-8dc7-21972b7cd5cb
spec:
  groups:
  - name: cluster-machine-approver.rules
    rules:
    - alert: MachineApproverMaxPendingCSRsReached
      annotations:
        description: |
          The number of pending CertificateSigningRequests has exceeded the
          maximum threshold (current number of machine + 100). Check the
          pending CSRs to determine which machines need approval, also check
          that the nodelink controller is running in the openshift-machine-api
          namespace.
        summary: max pending CSRs threshold reached.
      expr: |
        mapi_current_pending_csr > mapi_max_pending_csr
      for: 5m
      labels:
        severity: warning
