--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T21:45:11Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T21:45:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T21:45:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T21:45:21Z" name: system:openshift:openshift-monitoring-f2hkp resourceVersion: "6775" uid: 13b4a772-9045-45f1-96f1-c4c2581804a4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8d6afa2f-d278-4147-8ebf-3bd69e75eed1 authentication.kubernetes.io/node-name: - ip-10-0-128-183.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - a1e78cb4-1d60-4d20-8c14-68f22d5afca2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-wvc4j authentication.kubernetes.io/pod-uid: - ddc108c9-ccd3-462a-8694-2421004791cd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 141369d5-cfc8-448c-98c7-719bac33a4e5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRWmRwYi9pQnRYbmtwYmN1bHRnWDhJVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXlNVFF3TWpGYUZ3MHlPREV4TURJeU1UUXdNakZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJMcjM2WElENzNrcWZQZ201UHVTeEtNdApYVS8yRTVnMHF1QWk4aGFXSk9VYVV3dFQ5Y1l4WjQxOUNSK0E2MUx5NkVHd0ZNbFV2b2Vhd0Y5Zk1WYTNkNnlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVdnY0R1QkxwakQ4QzhERG80TWM5SDBjaFVKUTVkUHp0c3AxbwpES0dzSFVYcEkxU0lvczFxcjl1aVpFMkRhSnVrM2tjS3NZbU4rVzFGMXc5TjBIK2E0akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWxWTHRUQ1A0bTk4QlZscFlPeUUyMENTREtFS0RFK2VkbkN3TyswN2lZbVFISjFzTWN5NEgKWlFndkxKa3pFRjRHeHd3Y0xFNkNMb3ZZL3RWaElveVpwT3dJTVNCelZKZm93RW5scnFNK0FZK0o1SEYydGJHYgpHR0J2TG9qbzRnbEQ4N2xRZ1BsMzV6TTRPNDdhWUhXTjdRSVZVVjRvR2xNbWRSK3VSQkJheUtUVjM0WXl2eVVaCjRVTmtyV1dvQWVrVnNRWHRGMy9Pakt3RzJKSFY1L0RtY0ErbWFtdHFQWUxGNTJ4UWN3OUEvRmV6RXJBV2U3aFcKSlc0N3BOR0kwWXRMUmRoTHE1SG9PRlpuZ1FCbzZjc25OZW9TVG12dGlTQUE1WTJhYXVRaEFBS1JUWkQwQVRORgpscW1sMDdHcGdjRXAvRFlHemZTVE1JNG9oWFhJdGlSWjVRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-03T21:45:11Z" lastUpdateTime: "2026-11-03T21:45:11Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-f2hkp" reason: AutoApproved status: "True" type: Approved