--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:20:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T20:20:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T20:20:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:20:52Z" name: system:openshift:openshift-monitoring-4ztdb resourceVersion: "6920" uid: 636978ce-ae79-4b05-8c8a-8495bd5ee3e8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4b26754b-14cf-4a6f-8e46-29a50ffc6e53 authentication.kubernetes.io/node-name: - ip-10-0-140-11.ec2.internal authentication.kubernetes.io/node-uid: - 90f2c00b-caf8-4980-84dd-3f11e4bc78f0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-8s86w authentication.kubernetes.io/pod-uid: - e121dbf2-2ac7-4a96-aaa8-d83445c9ac90 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e1a69bfa-3194-477b-8630-f0344e2058d3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTXZXMHFWT1FyOUJFTzFRN3NhRFhJekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXlNREUxTlRKYUZ3MHlPREV4TURJeU1ERTFOVEphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJMa1BmN2lxYVdhWDdMS29NUVB2Y21JaQoxZkNwU2xyUk5ROVZRb1dRemFlSkd6N0JwVlc1MGJ3WWRqcnNUYlJ4d0ppaFhYRUhTaWZlemYrcDUxdnBHcHVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUd3eGNPSWNzbEVOVXhxZnEvclN2RmZocjYyeFV0L05YM3h4NApMQnlZMnVPb1cxcWxVa01mR1dnQ0V1NFNMK1JqSDdHR3ZKRHRyY1BVbjFVcTJMQkhCakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUtkdXBGM01iU1J3OW9hdDFnUGYwQnhiczJkWWNKS3VaUWQ5TjQ0THRUZlY4WWorRDhqMjMKRVBVOEtsRG14TWFuWWVVcnEzZ0thWnQzS1QrbjVGeGZQRWlVeG03am1iNDl4bTMraXZmOXdDeVVrSkV3Z01meAoxSlExQlo1N2tidVNwZlZFWm1jVWdBVXRhcVV0Q01WN0g4cFlscVZZM1lNUjlmdXg3SUtkNFEwTWNoUU5nRFMyCitEQWNDOHpjdk5kNUorbytqMTVmNnFEaWVncWNrb1hCVTgwY3lKcEpGQXhaYlp5QnZHQ0o3dFRpRDE4TGFLMDMKcmQydXZIVUdSWk8xOGZUcU1ERFRqdGlNWWw1anl0RkxSN25heHlzT3lYUkNQd0RmUmUrRTdNZmxxbHZWTFV1bwpOTkI4YkRiWkhwK0xtTG5PcXF4TXJORTA0VG5tM1JmT0dRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-03T20:20:38Z" lastUpdateTime: "2026-11-03T20:20:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4ztdb" reason: AutoApproved status: "True" type: Approved