--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:21:43Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T18:21:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:21:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T18:21:43Z" name: system:openshift:openshift-monitoring-mmbrp resourceVersion: "7921" uid: 7403709a-aee1-4d99-8b9c-ab2eafbe4282 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3dfa7721-233b-4580-aede-9626094346ed authentication.kubernetes.io/node-name: - ip-10-0-143-95.ec2.internal authentication.kubernetes.io/node-uid: - 39c9e750-8c5f-4871-a1b6-5fa5ff53b51a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-g9jhc authentication.kubernetes.io/pod-uid: - ee93315f-9c9b-4049-924b-51b8b2c9e9dc groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: fa2829e7-0992-4600-9dee-3d957bb1b662 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUpidDAvdWU4eWY3dzVjNWhHeXVqL293RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXlNVGd4TmpReldoY05Namd3TkRJeE1UZ3hOalF6V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVGxwMVY1TFNRRXhWbjQ2WGhPcHcvRgpCbng1UitobkFhcXU2dlowcThjVTJ6dnF1RGFyNkc5Nlc0ZlF2SlN3MVVEdFFJUDczVUpWMUR6WFdBSjhPVWlUCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFKYXFhUFNCMDJlSXZJVGFDckhGS1pkMkFnbVhzRTk3TkxCdgpKYldsTWtUU29kUTB5QVBXbW5GYjIzYmNER1VjVnBjT2huMDEyWUQvRjMrMmtqaWNzcDh3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFBZURROVhVSFVjdHVwMFlqaUxXZEc5VTgzQXlhRFR0VksycFZEcElSaGdUemtlN1RXNzcKZHhWaUc2SEk3UnVtY2QzWmdqSmZzOG4wY3lrUkYyZUwzci9qQ1phYWI4T3liZFA4b2FMTVV4bkdvMmRZSk83aAorUGlWQ2xESWtHLzVSRHZQcC9pZHh4VjJtK0dLWnVpQW4zYnNmUEtxTkxGeDB0cFpTbHlXQVEvaC9rdGxXdmJqCnVmVnpOZDJ0aFh4YUVDRHJXTlM3eDRDVWNEOGk0Vmw3OThVM3UyRWVONVBFa1dueFErT2RhZlk2T2tyMHRGTnYKdzhjSHhTbVd4RGdFOU1IQ0lEcmpGNDUwWGhHRURYY3NQS2Z0WHkvYjVIQllObkNSYUsxMCtnQkppRmpIRkNqRQprVFVSd1VWbGx1SmxVZDUvWE1HczVucjJZeEZOa08wNjU4az0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-22T18:21:43Z" lastUpdateTime: "2026-04-22T18:21:43Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mmbrp" reason: AutoApproved status: "True" type: Approved