--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T23:52:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-12T23:52:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T23:52:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-12T23:52:38Z" name: system:openshift:openshift-monitoring-252hx resourceVersion: "8126" uid: 5c74debf-ca7e-451e-b462-a762c45d71c0 spec: extra: authentication.kubernetes.io/credential-id: - JTI=1a738716-0188-480d-9f3d-fe3311e1b5b6 authentication.kubernetes.io/node-name: - ip-10-0-130-51.ec2.internal authentication.kubernetes.io/node-uid: - 808c7743-fd27-4f74-bef7-ce2f0cc0b136 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-zr44c authentication.kubernetes.io/pod-uid: - 2ce24f18-2f1b-49a4-be28-3b3e077b08c9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7cbdf742-77fc-44bb-8196-2aa1617615f2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRYy9hcDJuT2xyT0tWRU4vRzlqeEhTekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01USXlNelEzTXpoYUZ3MHlPREEzTVRFeU16UTNNemhhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQU0NmK1UzVFJ0VHBtKzRZZDloeW9sYwphcUVlUUdoZ0tKNXJGT3hmcjh3dWRnU05xb2Q0S2I4SzRPVnFLdHl3NGV0Si9ncWgvMHE3OXh6eE1nVTA3dFNqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUFFdUZBK0RCUjFQVldPS00yL0JKSnY1Y3Z1N1I2S0pYTnRWZwpFa1JTRWlwUWpCeFFjQ3NIL2EwUkF0QWFjd0ZaaVMxSUpEQUduWTU1WCtuTW04MnM5VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQU91Kzl6L3Jxd3VCUUZRYzZOcGVPRVpib0IxT0FIRGtCdktYdU91TXpDdEFDeTlOaTc1Ti8KZk1kOHAwYkMwNEh5TFVzcjJIQ3VGOUR5d2JTSElYSnNZZzdGZHJmNzFRczAvQmRiV3VlSFZLcVp6UEpnQm1LaApIWEFkS2lnaDBPbVdBS3g5RkVsY0JOdEU0dk5wNTRDWkZqaFJvc3hObnc1OHJieXlDZ3IwQzBnOGJOL0FJYWp4CmRnK1F4SE9lRXhpVHZrS2RxaUNtQUdCOWNzeUlBZWRHeGNjbVh3UkRxS25BVVZnc0t6cFo3a213TWlZeDdMT24KeWYwQTJicm9kRlBWQ3NRYmUwK0dXQTBGRWpqQUc0eDU3T1o1R1UrTEtTR3NNcnluQ2QzSWdUUTgzT0xKdWx2cwo5NnZDR0VseVA4UFVBTUVvTWRWMUMyM0ltcHRYcnN0c0RnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-12T23:52:38Z" lastUpdateTime: "2026-07-12T23:52:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-252hx" reason: AutoApproved status: "True" type: Approved