--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T16:47:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T16:47:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T16:47:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T16:47:46Z" name: system:openshift:openshift-monitoring-8lp5k resourceVersion: "8125" uid: 322444ad-0724-4737-adfe-d4c300faf130 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f2dd7d36-e8d4-4cd2-84c6-f477c8824371 authentication.kubernetes.io/node-name: - ip-10-0-131-185.ec2.internal authentication.kubernetes.io/node-uid: - 4ac87ea9-38c2-47ef-995b-73eaa16c16c4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-97zbj authentication.kubernetes.io/pod-uid: - 3cb986da-b1dc-40ae-acb2-bbaeeb54e3f9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2023b538-41a9-4180-aaab-ca0a53b0cb67 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRS3hlQkh5R1cvVU9jZ2ZYRGhqUzM5REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EY3hOalF5TkRaYUZ3MHlPREEzTURZeE5qUXlORFphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGaDBUbDJJVWU3OWd1dmx2UVhCK1J3Ywp0TmNMUHEyYmVNSi9QN0NTakNBQnlFR1lvNmJrSjlmQ3ozWTlJK1dmREI1bnJwdVJxS0VoTFdGcWlESDdMWStqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQS9yU01rdkhWMS9LU3RjSEpYeW9kTzVsMzVBS3gxR21kNGFxdQpQRTluWTdjY2JyNlpoRS85UjZ4eGIvRUNyTUV2aTRPMHE5VWVMSmlENzQ1KzRTVElkakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXUxSjEvV09QMEY3M1JBU2NBMWlxYndOTWNvRkRQYWZkN1J5RHpyaWd5NTVRdUxwRmpIOXMKNXBRMG0ydUpqc05GRVZHRmJVUFU1eml4OU5YYXhVci9NL3hpNjJiK1cvWHg3Q1l2bGQ2ZkZQOExxdmhma2RvcwpiTk43NnQ1YWQ3V3l3T0p5c2poZzVaNUZLTkw5cjZocFpDcjgyUnZFYThoQTJtaktCWDBzUHBabFFtQTYrR0VQCkFSVUd4QzF2MDhjQ09UdFR2N0dHN2NvS0h4ZXpMR2xCOTZTZGxOU2NUU1NiYXNmYTNEUEQxT2RnN3M5UTdncnMKV0lXdzhzeDZYQzZRUnJNbk9IRTNqckdkMkFiM2hOOTRSQXZUUWMrL0V6KzI2RnExK21vcWhoeDV4ZjNSWTIzOApTdjB5Z1RucitmSE8velpPL1JIN25kc0c3TDRpd0VCUUJnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-07T16:47:46Z" lastUpdateTime: "2026-07-07T16:47:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8lp5k" reason: AutoApproved status: "True" type: Approved