--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T16:02:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T16:02:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T16:02:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T16:02:33Z" name: system:openshift:openshift-monitoring-sfmvf resourceVersion: "6647" uid: 4ebe77cb-65ae-40b2-9bdb-eff681345ead spec: extra: authentication.kubernetes.io/credential-id: - JTI=02ba7d4f-f18e-4cc5-9619-31189a9ebf22 authentication.kubernetes.io/node-name: - ip-10-0-133-129.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 67142690-39bb-4815-a7c5-1cd656d61913 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-7ql5t authentication.kubernetes.io/pod-uid: - d7a6ba52-20d8-40fe-9723-54418819a3ab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5557e466-3008-489e-885b-646b2d52e7ec usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZjlBdGk2VnYrOVF4ZkNLYWhwUDZsekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXhOVFUzTXpOYUZ3MHlPREV4TURJeE5UVTNNek5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGeTJSTEZvK2JQVjJSbnVBNE9IQWhSMAphdUN1cmNZYmY2RDlydXljdXJWZ05MWXFSZmdEaFNLamYzZVRPaFNiZ2t6RlBsUDQvZ1hSL1BzZ2daNjlPNCtqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVpmQkZOR01lUng2M1N2UmhZTDlsOTBPQkZnYjR1YmM0eWFjcQpYSXltYXJvc08rYjZ6ZWl6REdsL3JCQnhlbkVtZ0VpK25IRWVKdEQxV1hPOFpWeVc5VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUJIWkNmVW42ZE9oaUxWT3ZPSHFkdGpGeDE5bTc0NjZkZWdXd3AyVCtoT3hkZCtzRlArUFgKSzB5WElweElyMDJQdUE5RE95Njk1eklBYjNQUFYyZmRobk9UN0pHNnc1d2FXanBORXQvTmtmZU9tZnJxYWFVMgp2SkpoZ2lZVFpBTUFmbTlwSVlKeitGdk0ybnFCYkZCKzJvTjQ4SzgwcWkzV1hJVWxOblVaRmtBdnhvcUFBbHlrCmZMYjIyS3VIakg1bmRUaU4rNlBQc2FqbEp4N01YODBxMnAxNG1pR2ZPNEpSWkx1ZXJoWWtxZExVNllXYXRwd3EKSDNKVCtlT2NoSWltZUI4cS9sNEFMd3Q1K2czYm8rc1Vzb2VBdk91MmZKNFIzWkVBdFpzOU1TSDdGZ1hUSVJCdwplRU9tb3VUNGNLd2ZEZThIMC9zV050bmxNYjRmTHJEdHFRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-03T16:02:25Z" lastUpdateTime: "2026-11-03T16:02:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sfmvf" reason: AutoApproved status: "True" type: Approved