--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-13T12:43:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-03-13T12:43:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-03-13T12:43:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-13T12:43:49Z" name: system:openshift:openshift-monitoring-tlvbg resourceVersion: "9681" uid: 38e03b3f-f634-4f01-9a34-14e7eaf2bbc9 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4ab22315-e315-40fb-a4cf-eb653c8e6f02 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - 0fa0cd06-0713-4d9c-bbbe-93031eeb0b8d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-674cbfbd9d-4jlnk authentication.kubernetes.io/pod-uid: - 71b741d4-3899-4d31-afd1-72f5a9321f75 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2fe09322-f8de-41e7-9fc6-e34a9f9835ea usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUNoakNDQVc2Z0F3SUJBZ0lRWk9KU21BaHVseUtLV01DcGkrdHBBREFOQmdrcWhraUc5dzBCQVFzRkFEQXQKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEZ6QVZCZ05WQkFNVERtdDFZbVZzWlhRdGMybG5ibVZ5TUI0WApEVEkyTURNeE16RXlNemcwT1ZvWERUSTJNRE14TkRFeU1qYzFNRm93UkRGQ01FQUdBMVVFQXhNNWMzbHpkR1Z0Ck9uTmxjblpwWTJWaFkyTnZkVzUwT205d1pXNXphR2xtZEMxdGIyNXBkRzl5YVc1bk9uQnliMjFsZEdobGRYTXQKYXpoek1Ga3dFd1lIS29aSXpqMENBUVlJS29aSXpqMERBUWNEUWdBRWJjWWQ4WHUxV21qTll2NTNmd2c5cTg4YgpCMFRxMVV5UTMrZ0ZtSHpGTjV4cnBPR25TeWQ1Sk1GMXJwdFFsK1NsYW15alVjOE40MW1JdmF1bWI3cmw3S05XCk1GUXdEZ1lEVlIwUEFRSC9CQVFEQWdXZ01CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUNNQXdHQTFVZEV3RUIKL3dRQ01BQXdId1lEVlIwakJCZ3dGb0FVb1ZHZmttWk5jL0hkbEI4ZURyd3NSdEZ0M1c4d0RRWUpLb1pJaHZjTgpBUUVMQlFBRGdnRUJBRzJoV1FUZ1BOcTdBWW45VE9wTkhPa09OLzFrSkJWT1JDMTJYQkdYQTJCYnpSUW9NQVlFCklHNUhYWGUvRU9kWEFadkVkWGk1THdycHJZa0FuMVU4ZlNrSUpJc0ZpcWt2RlIwczhKckJyb2w4R0pZay9BRk4KTnlKQ0FpTXJBTmFCUzNQZ3VmZTNIcUxzaFdnMk0rTzZWTXhLc1VYU2NMSGM0UEZzbk1lWnBuYmNJMjZMRHRHRApsU1U4Y3pFTC9lcm5BUlphdGxINnp4d3N4VEJidzluRWpwY3ZCOVdxYXFmNDRmbWo4SW1kbmViM1hNNUtKVHVuCkROdzl3Mmg0aUpXSzdWeENUNzZIZDJEWFJjS3JSbHh1Qk9SZjg3Q1VIUEZTL3dWYVUyR0JzaWhnZ0dEK1RQakQKSFBrSEZsMEk0bm5GbW9pQlpFSFZSc0djY2E3cU16MVg3bHM9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-03-13T12:43:24Z" lastUpdateTime: "2026-03-13T12:43:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tlvbg" reason: AutoApproved status: "True" type: Approved