--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T21:49:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T21:49:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T21:49:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T21:49:26Z" name: system:openshift:openshift-monitoring-rvnlw resourceVersion: "9424" uid: f991cf58-7acb-4a88-8ec5-78d8e0f49a3e spec: extra: authentication.kubernetes.io/credential-id: - JTI=1258bfc2-33fa-4979-9db1-6d0cad0278e8 authentication.kubernetes.io/node-name: - ip-10-0-128-8.ec2.internal authentication.kubernetes.io/node-uid: - 96d11913-c8a4-4d79-a5fe-f86164f1a866 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-d7slq authentication.kubernetes.io/pod-uid: - 92724e1f-bee6-4b01-a17f-ef6ad42dad4f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJIMVlLcWVUcmxiSXNPejVWNFhQTTBocXNDTDhHdzRZL1IyRENOejJ0dzlYWENqVHNIcUYKcHVhdUwxZXJ0d1NYc3Jnd01SVlZ5ZVU5ZytMektXY2NMNStnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQo5em9NN2RwS255QTZCR0R0Z29DOVl6cW5Ua3V6RHMxeFlVT20yQTEzR25nQ0lHNHVtU0FwS0RCM2JmS3ZKTE8zClZISEM2aXp0OEc2TW1TUXg1K2V4dWR1cwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 42d6264b-9b87-46a2-a342-ed05a6a61bf7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVWJhUTdVTFZ5ZXQ1d3htU3BuRXVUakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1Ea3lNVFEwTWpaYUZ3MHlPREEyTURneU1UUTBNalphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJIMVlLcWVUcmxiSXNPejVWNFhQTTBocQpzQ0w4R3c0WS9SMkRDTnoydHc5WFhDalRzSHFGcHVhdUwxZXJ0d1NYc3Jnd01SVlZ5ZVU5ZytMektXY2NMNStqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWRxS2hDdm8wNlZIZkJUUDIwN3VKdUhEbjhkV2pXYitXYjVaTwpQbC9Ja3JnYVBSSEN2Mjc5Z1VBYXhtN0pUUlFOWGo0NXhvSzVpQktWVndqVlBVYTY4VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWozRWdRK1Y2ek84bmE4UkExc3RoSS9BbU5MZ1VNNFVZK0FvS2Fsb0UrYlVnRkZFQi82V08KQWVoeEpkQ0JwZlRqbnNsVG9OaVlXYnVkdmc0VDBGTWR3VUVHd0E0RUs0bVJLRjZNc3FFYmVnWHdleUcxdysvUwozMU9ZZEZ3K1B3YjZOek1uQ2REZVhwT3JBNFFORVZPb1FMNlNVQ2RZdWRSOW1iWlZUUjAxVTlLMjl1OUZVeU1UCkkzQWJKRkRtSWxxMXJCUm5vMnBlRWtVMTlUQkRWamJOelE1Tm1mZTF1Nk9CUldtd0FzUFdOb0JrSCtKSDF4R0gKSDJvS2dOZXVST3FTVEpKanBmUktRWmxoQzl5TE5wNXphL1NQT04wcVhOdFp6K2tYZGFVbDJjSTFOKzluOUErawpYdmVXZmRiNExWaE5EcmNJL3U4Qm5lU0NSWTNjWlRnZGl3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-09T21:49:26Z" lastUpdateTime: "2026-06-09T21:49:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rvnlw" reason: AutoApproved status: "True" type: Approved