--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T17:01:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T17:01:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T17:01:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T17:01:57Z" name: system:openshift:openshift-monitoring-9tfm5 resourceVersion: "8413" uid: 36ede697-6137-426e-975c-fcd2070816dd spec: extra: authentication.kubernetes.io/credential-id: - JTI=20736258-e31b-45bb-a0af-9ab0ae0e3898 authentication.kubernetes.io/node-name: - ip-10-0-136-68.ec2.internal authentication.kubernetes.io/node-uid: - 04cb051a-a5cb-4495-8d3c-b02c7837fc1c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-6xrrb authentication.kubernetes.io/pod-uid: - badf66a2-ec5d-4590-b910-2f6cddef1caf groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVC9RclpvWGhkT3dGYlMvZjluR3h0N1lRRlo2UFNIWG9RTVFzZUNUTm5Qa00rU3I3ZXUKUVdQdGJoa2tTTzAvZFJZY1N5bGg0QzhTOTlvdGgzNWZOY0N3b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTmxMY3pYYmU3MzlEbmwzQklwV21CNVVod0dST0swMVRiemQwNCt1SktnTUFpRUFyRkpUVDByVTJvbDhEd0xJCmlmY1VnaUc3VERVZHdrL04zbFZFTTlTRDZmQT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 8b4bdf43-3874-4ef9-949b-bf754b363865 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRYnd0T1YvTHBRNlBBckZNd1BwMjQ2akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016QXhOalUyTlRkYUZ3MHlPREEzTWpreE5qVTJOVGRhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQOUN0bWhlRjA3QVZ0TDkvMmNiRzN0aApBVm5vOUlkZWhBeEN4NEpNMmMrUXo1S3Z0NjVCWSsxdUdTUkk3VDkxRmh4TEtXSGdMeEwzMmkySGZsODF3TENqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWZETGcybGJqRm9BeTJxSm51SjJwWU43YkJXTitxeFFURGRLUgpXYmxBNFh6NDMvRXFXMDZNUnF0RVBMTGhocnYrVStKeUxRUlRRRkI2ZUxXb2hkMVd3akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVp3cnkvNlc2L21MNkFPQ3p3d3VuUDV3azdacFY4Ri9yTEZ4QiszeGxpcUhadmc3ek4zSDYKN2tTWUpnV05haWhuWXlZdUxNanU3SU1IelZtWXMwUTk2eDRsNm91VFllNURVbm01UjBXWCtaelZhNDMxV1VFMQpFeng3Mk0ybEIrTjNrOUZDdFNBV2k2aFN2TXdkSnE2YzVpRTJwSjVER0o3NVU1cm80QTlzeVpMRVJQRW51U2NOCkw5bWtyZmZTK25RNyt0bEpWQUJkdWdsMVhpbkRUZ3JyR1BYWVBUQ1ZRbG81eklEbUc1RERvcG53V0Fra1g3c1YKc0MzTXdHN09ERXBkTVVWY0d5YTltM0pJYWJyWXoycXM1RVdOYS9uWWx1dENKcnJVZCtwTENTUElXY0Z5TEJlZwprN20xaEdETHV2V2NsTzZwV3pjVkxhQkJ5Y0NaSG05ZFBBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-30T17:01:57Z" lastUpdateTime: "2026-07-30T17:01:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9tfm5" reason: AutoApproved status: "True" type: Approved