--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T20:39:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-30T20:39:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-30T20:39:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T20:39:23Z" name: system:openshift:openshift-monitoring-btlzn resourceVersion: "7087" uid: cd693df0-ed5c-4be9-8c11-29b903322ba6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3b082769-e53b-4cc4-a1c6-6e692db96935 authentication.kubernetes.io/node-name: - ip-10-0-135-104.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - f4052499-1e42-4c56-aa2f-f1e16388a44a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-wx776 authentication.kubernetes.io/pod-uid: - a99477a2-e4e4-4608-a66e-00009ec9f50d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3cb865af-6097-4c65-afad-25d002cd6d81 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQ0J6d3hCc3REamYwMTllQUJ1b2pnREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFd016QXlNRE0wTWpOYUZ3MHlPREV3TWpreU1ETTBNak5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJFTW5OWjh5V3FFVjJDK3FiejNTTVdFUwpwUFB6L0wxbU5tTzhzVU1TbDRTcG5zakhZb1FVMUxvWWh2VldqcDM4b3hpMnVVN2VCKzFScFIzd3VFSGhWNzJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVg3NUJRR0R3TDAxVmhaSXdJbzF2UXYzMTdzN3RWV0xTMkVNLwpXRFE4MUNTWUpMaFBuTzEyNmNiNHJXRUtGZkU0OWdpYllwajVCa0I5bEhHd0Z0RXBTREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVRTNDVVY00vY3hPQzRvcVd2ZTFTZENyVjBHamNsd0NUZGpoNU9MNThoNiswQ2NTNmdldUYKRTBEdEVyRnlGdXo3bVU3alJYU1JkOU4xVytMTVVVQ0RpTnk0VXRCTVNtQXM4Wmk4S1FZektJY09zTkw4SE9xMgo0M3VRNHN4L1dsakJWNlcxMG5iTm9oaVhuQ3NNU1kzd3k3ZVA0NmFPR1pwQlBlMFVVViszMUI0VW1mS1lnVFZOClNSdXN6ek8wK3BqT3laeTA4bFV5dGtNcGlzdlA2dVE3WWdrS3k4bmJDWDJGc3dLc0hwTHRKeFY0YldpOHJvNHIKa1NTc0xGay92R0UreWtPd1BSYzdFVWVKWXExRUJ0d0Vhd1BoQWhsVTIxYmN6blBRMDYzdGdvTnNiVHFSdGNJWQpVUXVMM0ZZWGNmaWFaSGt6TUc2ZmxZd1p0K01KS0RoMm9nPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-10-30T20:39:02Z" lastUpdateTime: "2026-10-30T20:39:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-btlzn" reason: AutoApproved status: "True" type: Approved