--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-01T22:22:27Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-01T22:22:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-01T22:22:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-01T22:22:37Z" name: system:openshift:openshift-monitoring-8vwkn resourceVersion: "6777" uid: ef04809a-f247-4eec-81e7-c29a7acb2c33 spec: extra: authentication.kubernetes.io/credential-id: - JTI=79da7f0b-cac1-4bcf-b52a-defe5e7a3738 authentication.kubernetes.io/node-name: - ip-10-0-141-148.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 71ac56ab-11d7-43e5-860f-14527106bdf5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-l4759 authentication.kubernetes.io/pod-uid: - 71d83910-eb9d-4178-b1c3-3fdf24524dea groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJNcUpEVGxZdzYzUU1zaXpxVU1hSGFORnVGU3MxQm0ydXFja093YUNZMEt2czJ0VXBSNFMKZldIMXJrNGNUWDQvOUNFZ3lmSlVNTW5QcW1uWWV0Z05jd2VnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCZgp1dUZna1A4ajJkSDdLU1IrU2tTdjhRQ1NUTGJ2aHo3WWZjbCtVa1g4S0FJaEFOWlo1ZVRvUkZSbmdzb2tqU0UxCnd0cUlIdUtXT29JSTA1eHhkcDJTY251NAotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: d3d943b8-0dde-43e4-875e-4d964ee3429f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRWHI1Y0ZxNFBESXM2K0Q2aWJsc256akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ERXlNakUzTXpkYUZ3MHlPREV3TXpFeU1qRTNNemRhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJNcUpEVGxZdzYzUU1zaXpxVU1hSGFORgp1RlNzMUJtMnVxY2tPd2FDWTBLdnMydFVwUjRTZldIMXJrNGNUWDQvOUNFZ3lmSlVNTW5QcW1uWWV0Z05jd2VqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWZWcE5lTURQWTB4VjBXRnRmMzNJWHJDU2wwaUtDQUxQRGZ0eApBTFNxVXNvajJBVlBvUGNwY2JxaUtJeFZpbWlKbjkybnZZazlaQ1V6V0IwYyttYVZ2REFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXJJeThjNXdrbXRFeW9Oc1RDTXNSS0FqTWVKb1RWNWd4LzRPRE1xTE9zb2ZTR1R3OVUrRXMKTEV5eTgwS09OWXl6cGtGaTVYNW1IdHVzTkNxbmQrSDlpZGpBM1RUQzd6SWR2ckV4aUlqVWl4Y09PRTk0SkQ5WQpLTWJZMXdDMjZYWU5qNmNyUThkN1R2ajV5K0lkZ21GWk5PMnFQbTZVWkp0OTYrN1N0enc0VW04U2tPUERPcjBUCjdnZG9odWtOSGlJUno2SkNYVXdSV0RXNDgrLytrdzNuQjRpU3lEZGViaTlnSlFhZmhtWldUWW5hNlBjUTd2R28KOUZUMnd5QW51ZXdlYmpRUUdzcFlxMDlGcTNpajBscjZUWTdLb0Yyc1h3MDZYcCtpNWtDUjRuYnhsUDdtTWJrZgpvdXZEOUNkdXNnWTBYWkpIcnNJRFhPaDFLVFJSMXZVUXNnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-01T22:22:27Z" lastUpdateTime: "2026-11-01T22:22:27Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8vwkn" reason: AutoApproved status: "True" type: Approved