--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:27:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T17:27:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:27:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T17:27:46Z" name: system:openshift:openshift-monitoring-r8vl4 resourceVersion: "8302" uid: 9eacedd2-21ba-43e5-a971-4d49ede75b24 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4c6d5798-effe-4894-b92f-85923dc7183e authentication.kubernetes.io/node-name: - ip-10-0-139-180.ec2.internal authentication.kubernetes.io/node-uid: - d0bc9696-6c21-45d2-bc4b-18196bf5dd1a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-vplfk authentication.kubernetes.io/pod-uid: - 269b0a85-b750-4b69-bc57-58b1f9f84c58 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 92e052de-3af9-43f1-9e89-af2f54ef905e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUUxPSGQ0WWxCTElXM01MZVNWV1orVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UWXhOekl5TkRaYUZ3MHlPREE1TVRVeE56SXlORFphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJHMmkwY1JKdEgyOW1oZlQvRWgxNEI4eQpWa3JzRHBoQmhrZ0pTUXpxT0R2VFV2M2IrRklFVVBxMHI2R2NDbTJIRzdWeitCU1VzV2c5cHQvSXEvZWY4cDJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWp0elllam1LREMwamthRWY0dXVKWXlJYzBIVlZiK0VZdFBwMQpOai8zZEl0aWsrOWUzbmVBMnFuQjVXK083dWFMR2kvRGpKL1NINVZsdVo3R2F0czdWREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXJhU1RPUWorTythYUlsR1NXV21rUkRLQjh6c0dqa2FremlHMWh4Z1F5OWljVGNzZXhCV3MKUmlZVElIazlZZmNvd0E1K3ErbjBFd1IvOVp6SHBIQThKQ0tLeFVnMUx3SWpwVnM1RWpNaThDMm5PcnU4UmhMcwpsd2pMSzdKeDBCelQ3V3ozU0ZWYkozam9hbFFvVmNtanNXTk0zWDBlY0p5YmhHeHlmMGJ4UElQZnhZSE1KSlVmClZOZ2RISTNLZ0wyc2t6dXFVQ2lXazc4KzJ6ZEpyNHR2YUs5TWhQaS9iNDlYWG5zSEIyN3VOUVgrTFpCZE1NcFIKakRSb1JFc3RBdWsxT2xYWWdqZWpVdVp1aEdZZ2NtZUpIakVTYTZOV1VXUWxueThPOEF5alAzYUYzRDRxcW5ycwpMR3hMc1pLOC96R2NtWlNRNENsWGg2NXpyWTJ1Z1VQQWFBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T17:27:46Z" lastUpdateTime: "2026-09-16T17:27:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-r8vl4" reason: AutoApproved status: "True" type: Approved