This is a cache of https://docs.okd.io/latest/security/certificate_types_descriptions/monitoring-and-cluster-logging-operator-component-certificates.html. It is a snapshot of the page at 2026-10-17T18:24:22.834+0000.
<strong>monitoring</strong> and cluster logging Operator component certificates - Certificate types and descriptions | Security and compliance | OKD 5
  1. Documentation
×

monitoring and OpenShift Logging Operator component certificates

Review service certificate authority (CA) certificates for monitoring and Red Hat OpenShift Logging Operator components in OKD, including validity, automatic rotation, and system-managed namespaces.

Expiration

monitoring components secure their traffic with service CA certificates. These certificates are valid for 2 years and are replaced automatically on rotation of the service CA, which is every 13 months.

If the certificate is present in the openshift-monitoring or openshift-logging namespace, it is system managed and rotated automatically.

Management

These certificates are managed by the system and not the user.