--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:36:14Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T12:36:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:36:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T12:36:14Z" name: system:openshift:openshift-monitoring-rftvl resourceVersion: "8463" uid: b13bacce-0c63-49c7-ae70-170b22458c0d spec: extra: authentication.kubernetes.io/credential-id: - JTI=8bbe5aef-3b6b-4bdf-8d37-4c3e37d8e39a authentication.kubernetes.io/node-name: - ip-10-0-137-166.ec2.internal authentication.kubernetes.io/node-uid: - 50360495-3267-4fc7-b39c-1a966738dace authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-8jn6l authentication.kubernetes.io/pod-uid: - 4f4d5e6a-4f3e-4a58-9217-80d2b71cf7ab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ac9bc000-3524-4ea3-874d-f8b49bafbdd3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQmthQXNaOFUwbkN5WENUZDl0LzNOREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qZ3hNak14TVRSYUZ3MHlPREEzTWpjeE1qTXhNVFJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJBYVZwdW5BbDdyUzUzZGpTSURSU1RLQgpORmRTLzZ6VDliNDF2WjZ2cUVpTTU4ZTRndE1hVm1iTXA5cHF1S1lNZDkxYzllNkdDOTZPTGlSKzlYRWh2cHlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXczMDNJRm9JeW9FWnVNZ2hrUllxYXBNWGpNdWY5WXZ1MlJ5bAp4ZW5aY0NoWnZxWDlPT3prTm5IZDBVUWduN00yWVE0YnRzTm14Q3pTV0RCMjdmUndBREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWtNbk9SWjRzNkZxTVBDOVJDaDNReVJxRVVNMVJzTS9SMDR0b0N2YjZPbW5wallvOFBpSnMKQkg5eG10RWVmTGVsbjErVkF1WWRQZGZTc0taNk5QMnpmWU1YSStQT3JNVVJNYk5zNHdVU3grQ2o1TG1wNnUzeQoxOCt2Z1JjTWUwREE0L001ODk5Q2xuNk9USnd1OXAzSTlVRU9kWC83eEIrN1grSFdzMjR1SndKcGdPc2pnMGI2CnlyYXp3OFJlRUZvck5LZzhNYU5XbXRRMysyMnRJWUF1YlRRa2hZcWJJc2RDRlgwSUI4RWxldVVYMGRPSnVoQ1MKMjdMcWpDWEFrZlp6Q1B3STQ5amZrYkZCWjZvVkVXNjVmQjN2QklRVHkvNEc5WThSclliNFJxSzNtMVlBUzM4WApIU3ZEUGtvRDl0bFlwUXRGZm9Qd3JMaTgyNWhIcE1sL1h3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-28T12:36:14Z" lastUpdateTime: "2026-07-28T12:36:14Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rftvl" reason: AutoApproved status: "True" type: Approved