--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T16:35:18Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-23T16:35:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-23T16:35:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T16:35:22Z" name: system:openshift:openshift-monitoring-r8fgf resourceVersion: "7404" uid: f02432d4-ce9e-4949-a4ec-a5769c905da8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9a371219-f1b4-4441-9100-6e8ab942681d authentication.kubernetes.io/node-name: - ip-10-0-133-231.ec2.internal authentication.kubernetes.io/node-uid: - 12c68359-73a7-48cd-af9a-e25b58c4f6f9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-d4nsk authentication.kubernetes.io/pod-uid: - 6e3b3b5e-7dd7-421c-9733-f304050ddbce groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVG1SMjRRbVdxTHFKR3FWNWlaQVVYNjJCYmF3M2xGdWZBWnpPM2NaZ1RTTG51Uzlud0QKNE85RjJwQndYTVdMb2h2SGhDKzcvdWNoV09PRUZGTkhzRWNZb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTXZ4SCtJdk9ObmNBNk1Ma0g2Ym9YT0ZUQWNhT1RuUUpxVWRkNWU2M3ZwTUFpRUFwaFJETy9yYUdtNWp5ZzhGCmVFaDFXWmdlZGRVSEFGVTc1U3hPaTRnSkF6QT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 3356be85-abdd-4db3-bb0c-6e67013ec862 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUGRQU0VVcHJRcUpaY0dNOCtmZFZZVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBME1qTXhOak13TWpKYUZ3MHlPREEwTWpJeE5qTXdNakphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJPWkhiaENaYW91b2thcFhtSmtCUmZyWQpGdHJEZVVXNThCbk03ZHhtQk5JdWU1TDJmQVBnNzBYYWtIQmN4WXVpRzhlRUw3dis1eUZZNDRRVVUwZXdSeGlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXpkTGQrTS9TME83VGF5T2xSQllZT3FoL0tETjNhcUZCektkLwpCcUxVYnl6b2hYVXVyRmdPdENCc24rckRkdXh4SDNTU2NoNmFlSHQ4aGl6SXJXMnYyREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXJNWWFhVlVwVFljeDZDNEo4V0lMMlJrMzRaTldtb0xMYTg4R3cyY1paTTJtS3BxNXNTL1MKMmp3aUE4MzNhRytVbHFsdmo0anlBR2NzNkhidnZoU3ZWYlBmeWpSYzVvZkFIcVhlWGZueFlmMW1tVUR3Yng5NgpqTVhzaUh3T2UybzJZbEVUVTMrcEYvVHpaVEhwd1VBMHlOZldjcWFIVHd0MEVMcWNMaExZNTdVRUZiR2hGSXMwCnpGSkhWem4xZXFGM0RLcWRod0xZbkx4QlI5QzFLWTNMSndLbWcydmIvMXQrMkI1V1I5UW5QTERGYnpab1BjaTMKa3BtZ3BieDNsRjQxbVZaOGpYYWpDdGhDajQrSy8wSXdBL3JYbmh1b2xPZFh2b0NVUzk0VG9sODl2dlpHQlk3Tgp4YkNEa3NJUCtldEpqeUZGUm44M2xyUEQvM1lHRWtHSWZBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-23T16:35:18Z" lastUpdateTime: "2026-04-23T16:35:18Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-r8fgf" reason: AutoApproved status: "True" type: Approved