--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T14:56:53Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-02T14:56:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T14:56:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-02T14:56:53Z" name: system:openshift:openshift-monitoring-d2jx7 resourceVersion: "7378" uid: 297935eb-cca6-4d5d-891c-77f9bce8a53a spec: extra: authentication.kubernetes.io/credential-id: - JTI=7b6337d4-f140-44d1-9f67-bd2e151412ec authentication.kubernetes.io/node-name: - ip-10-0-132-27.us-west-1.compute.internal authentication.kubernetes.io/node-uid: - 923460f4-c10b-4d62-9c26-51a04c3008ef authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-q2t8x authentication.kubernetes.io/pod-uid: - 885145c5-6077-4435-89ce-73af1e6a5600 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a203fb5b-16c6-4f1b-b2ad-3f9e605b87e2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUER6cFZuK0xobCtMS25iZzZ1NDVzVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ESXhORFV4TlROYUZ3MHlPREV4TURFeE5EVXhOVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJJcmtwS2VVMGM4QzRsN21KOGdQN2NjSwpMQ2hQRG9BcExXS3dzNnlRMU4zV0sxbzVscU14eEFwQUpSYVN6M3hGd2JUbGVJLzNER0tQR3U0WC9jZzdHanlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUhGSEtoMTVUU002eWZkT3pHa1FIb3NGaHNaNjFMSGdHbTJBUgo2Zyt0QVZIZXJQbnl2NkZQVGppekI3YnZpc1VBKzdjSnpiR09MVU1PMW5hUzk5UHdYREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVNDeWFhY3ZtaXg2VHR1OUhOWlQ5cHh4N3FLL2IwS3c3NFVTdmd6NHhHVG1xdkExeE14T0YKSUZ5RWw3dTVQSHc4RndaWCt0a2xuWUJ1OHpybmYzc1lTd2xBUytrY2VQendqdDNGWDA3akh6UEo3emRaSml0Rwo3ZDhMdFI4blc3U0dYUmFWUUlHQlBzWlhuOUsrZGNUVURzbzFYeVdqa2hkS1hRaUNqL3RMd0RpTXlhV1h0aWJnCm1JZ1NmUVlMdS90U1JzMm5BM25salNQc0ZCdjJ1TTdKaFVsVUpFSlRNNWg4SEdJam9Yd2FXeUdJdTI5U2FjUXAKcTUyWm1RMUpaODdETXJFZDV1bEgxWk5KV1pHbnVYdWFhd3dybUpSSDB1N0srVTVOeWo0S2F3V2JuTHNLR25RTgp0aEYwZjF2bHluTVpneGNURWphbGpjYTYzMkdKWWdvc1VRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-02T14:56:53Z" lastUpdateTime: "2026-11-02T14:56:53Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-d2jx7" reason: AutoApproved status: "True" type: Approved