--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-04T22:49:28Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-04T22:49:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-04T22:49:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-04T22:49:28Z" name: system:openshift:openshift-monitoring-tlm8s resourceVersion: "9383" uid: 9131ba75-ac43-4333-a65a-f9318e508bdd spec: extra: authentication.kubernetes.io/credential-id: - JTI=124787de-8310-4fc2-8d1f-7d42076fd001 authentication.kubernetes.io/node-name: - ip-10-0-141-117.ec2.internal authentication.kubernetes.io/node-uid: - cb196d18-ff2e-47ac-a8da-ecc3541d9b44 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-cm7sz authentication.kubernetes.io/pod-uid: - b7299da1-5e0d-466d-be27-5421cc6c740e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 560e6aab-080f-4844-ba04-97544c2c5c63 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRV0NmeWFPYkJjME91R09ZSFBLL2UrakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EUXlNalEwTWpoYUZ3MHlPREE1TURNeU1qUTBNamhhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJEMnJJN1FObVRWNzg0d0ZtQkVVelkwUgpFWCtnZHJMQjVOTGI4SC9kTzd3VktyWWM5eEw0cXlkYmhEd3drL1FHUHBmalpXQlZQYTRVMGpwODJMeE94aWFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXBTYmdBSHNxRE5FUzFOc1YxNFhXdkJnb3RlZHFITXBaQ205cApIaXU3algrNWovVXFNSnppb0ZEU01Xa0ZsRnBZc0Vub09YQ0JscDMvNXYxa3J3cnNwekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQU1NdFNDV1FqMWRGb0Rpdm9BNkMwdGFLbnpjZ2d4L0dFcnpYTkVBTHQzSHlaY3hGN2xxM1MKOE84SkJLUjN3RU5vaGJhRjBUajZuYnZ6N0N4ZEdXWUk0RHhnT2lZanFpcURkTlhObTRJbnhaSHVJa1l6emRSVwowa1RPOWJwY1VDOTJEbmpPcE1xa0srKzVEdzNuVFRXK2VwYnRJa3FmSnBlZURNN1dkM2VPK3RKZDEwSWZVTHhVCnNyNk1BUU5BTlpyOW53YkZJS3h0d3NpQ1RIRlRtWGlkYk5WWW0ybW9RRzZOTDZzWm15MXBMUzM4L0s2eWIyRnMKUGV0Y0xVQnd5Z0FvcXp4NGU5UWVaVmFEazRMekVtcnVsNEcrVHdkZUJQT1djallyWnMxeFRiR3dKZzk1YnNCeApScjd6c21YVjhkeEhoL04xRHErbXdFbDFtdHFwL0Z1T1lnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-04T22:49:28Z" lastUpdateTime: "2026-09-04T22:49:28Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tlm8s" reason: AutoApproved status: "True" type: Approved