--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T14:52:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T14:52:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T14:52:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T14:52:15Z" name: system:openshift:openshift-monitoring-bp8d6 resourceVersion: "8318" uid: 2ac0978b-9fb3-4a7e-9857-8fff8ca254a3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=87995bdd-746b-4811-b200-9cebc5370f6f authentication.kubernetes.io/node-name: - ip-10-0-136-56.ec2.internal authentication.kubernetes.io/node-uid: - df1d633e-6e76-4e5e-9086-3d50ae9dbf70 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-zlcqv authentication.kubernetes.io/pod-uid: - 1521c3f2-8211-4e48-961b-d89280ce07e7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c99efbde-2be5-4187-93b5-152fa41476bf usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU1wc1BpODZldkN4VVl2dVQxWTlnQjB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTRNVFEwTnpFMVdoY05Namd3T1RFM01UUTBOekUxV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU3IvS3V0UXljTmFTVkxnZjU4Y05ERwp3R0VDQU1aZGRQYlJ0Mk94V3JabUoyelo4M2g0SmtIWFhuejRxNnV4U1NIaDJOQWdqaVJHTDNUSjh1Y3lDMkpzCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFMR3NXSXRCRy9XUE1NVEp1THFXMitXQmwzeUlQWmNjWFYvTApoR3hCOE90SmZmcjhleG1iM0NqRlAvbHViUk5jbnFDUVNGSTJnL29ZR3hQdlkyN3kvcHd3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFIVnFxYncvQUtlcXFkRERZS0g2L2wzdWZ1R2Z3c1BWVkhPZDVGNXlocVRmWFYwOVBMSXQKeWI1Zm84WDlyMjRna1QrS1J1R0ozMm15V3d0TFBXV2VFcStYL0cwbnNvMVppOGpvYlF2eUVRY015Uzd1UW5zSQo5bkVyWkZNdnBKRU9qMUFaYVkyTkhhS3d1TTI3YlJiTENqdEpRV1ZLTHpZbk9YZWlMRFZVRU5WeGJnNG5ISzZvCkRmZDd5ZU1KWFFqR0tSV0JQTkEvMXlaMWhiK3dXSXMwVFJ6VFc5K1h4ekliQ0VZeFBQRkUwYTJYT0RNZDZ3WjUKWVh3NmRabDl4SGFXT3ZwQzBDaGZaQUp1TlZxb0p1bDVWY2RMdS92aGFYYUNQQmxwdUpYWWVGb0d4WkZ1Q3B4QQpSZ3JoQkZ3S3BOMnJVK0hndTd0Q1JSM3k4U3lGNWNNMWZpND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-18T14:52:15Z" lastUpdateTime: "2026-09-18T14:52:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bp8d6" reason: AutoApproved status: "True" type: Approved