--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T21:23:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T21:23:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T21:23:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T21:23:05Z" name: system:openshift:openshift-monitoring-5r7dc resourceVersion: "8025" uid: 99492df1-86f0-4ee6-aef7-17c33f847226 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cf71071c-7b55-46e9-8dfa-933efbaa2f4e authentication.kubernetes.io/node-name: - ip-10-0-135-209.ec2.internal authentication.kubernetes.io/node-uid: - 079f8799-0eee-49c6-9039-34ccc36dc851 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-5ldzz authentication.kubernetes.io/pod-uid: - 2cfc325f-85d2-4a82-aa0e-12c2ff6beb14 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUytYaEZ0RnhyNzNnQmNCT0dpR2xZUjcvR0E1QmpFcVh6aWZSMGZ1RHN1WWdLQ2tQKzYKZElhTHluZE5jMk1zWE9DNVh2Z1l4SVBFOW9Xb1pTVXBlWStyb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTyttZ1V6V0lCUWdjbkhXWkNXMXFJZWtoby9UOFc2bnNwb3BIdnFzL1FLREFpRUFsajVOaEN4ZGJZRkZET2l1ClNVTXRRUFQ5dmpGeFA3dndpZ2JyRk1SYjRpMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: ae432c80-cc62-43d9-86d9-22ff3e5e1f22 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTGJPTkxkSWtlTkVxQVBDVzdFRDAwVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UWXlNVEU0TURWYUZ3MHlPREE1TVRVeU1URTRNRFZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJMNWVFVzBYR3Z2ZUFGd0U0YUlhVmhIdgo4WURrR01TcGZPSjlIUis0T3k1aUFvS1EvN3AwaG92S2QwMXpZeXhjNExsZStCakVnOFQyaGFobEpTbDVqNnVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUFnMUpHaVE1c1ZkWXNMamJCZis5eitlZURXV0I4VytGeWFUeQp6NjZWTzVSR3d1bU8ySllCOFdaSmp5TU40U3lwMlRUMWJkQVpzcTFUMGRmRkwvU0RNakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVV1RENNMUw5d0NTTm85R3BPbit3VGVyUnJEbEpsTjlqTEhwM2EzTHRuNlk3TXhQUkhGcDIKZlNZc3k5MElWbHQ5TDRhSk41eWN0aVBTOFhPMlJZQ1RneGZQM1JvaWJaUUJxQSs1KzkzVDRydjNUMXZzU0dnQQoyM2Z2b05tbXozRTVOSWRDd0h2MWtLRmV1M1FCY3lsbVN6VDArVGszaXA0akZmWDA3eUR4NEJ0VlltUXo1WkRHCnBVT0xxb3A1ZHdXaXVYUlhWdExzRmtRc09hNjBWY0pieDlWWW9kR0hGTFVXbG13K3RxcHdwTkd5VDVsWnZvRHYKeXRtazZCdWhiOXIzSUJrSUJJMWZ0QUVDMFZyNFNXODRtaFNJaUZQQ0tScDhBL1lWMTlxNjBIVEtEQTBPK0dTbApkeVVsdldxcVA0anZ3cSs5UTVFd3lBeHlFTlpaQnZndG1nPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T21:23:05Z" lastUpdateTime: "2026-09-16T21:23:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5r7dc" reason: AutoApproved status: "True" type: Approved