--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T23:04:16Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-28T23:04:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-28T23:04:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T23:04:21Z" name: system:openshift:openshift-monitoring-mrf7v resourceVersion: "7998" uid: 9deb3270-c1e1-46ad-a6bb-6a57e0c2d072 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9e733212-9363-424e-b4d6-ca8d2d18b5d0 authentication.kubernetes.io/node-name: - ip-10-0-143-104.ec2.internal authentication.kubernetes.io/node-uid: - c84ce64b-342b-4969-bfdb-4bc8658fbb9e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-xk7gh authentication.kubernetes.io/pod-uid: - 9d86f162-8349-42e1-abd1-aef9e7c328a4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b909a18c-4fb5-40f3-ad3d-75e26be5c7f4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU1EVVZ2NVNkT1FiZHlYKy9KcFpxM0F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USTRNakkxT1RJeFdoY05Namd3TlRJM01qSTFPVEl4V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVEhSekVRU1JQRHh1cUV6TEd5UTlNeAppZFZkMWkwVWpHSUVEdDNPL2s3WUVtUEFhZHoyY3JDajFRRTdSRGRpLzlFK0g2S1J4aXRPWFg3T0hOaHdjdG1NCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFObENlbWh6U1JBcmpxb1lkb0xWbzFIdjJ0dFlCYktVTG5KRwpQWnBWVnpwNG1aNjg2ejA2VUt4OEtvL0QwQ3h2b2cyKytwYWpWMEZhcEsyZzdOb0Yxc0F3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFNQ1lsUy9RMThlTThjOENVZEkvbTY4SGNMZHM4dlRaYjk1b3oxY2czajJ6Q0t0VTVlanEKTkxvd3k1Z1hGNFJyNkE3RHpZUnMvR1FscTEwU3ZuSHpIc0o1NHZYMTQ2bDhPeGswSy9CT0NJYVcydVlZajBMZQpVb0UyQksxTUtXclNLcVl4RU5tMmVEQjVYV3h3L0dQQWQxaCtqTHh1NEkyOG83WjF4U2dqMFpMSjdLeVQ0bVQrCmJnQ0NQQVcrLzRGZjZmUjIrb0RtRkQxVlM5Q2VnUjVMcUdweG81dWk4TXBOT25GT2N5QUxRZ3N2Y1lBaFZZNjgKQ1dFdHUreXN0bmxlSHZIckIySkpWOEkxM2t5MHFtdmR5SG5iYm1ib0ZGZ0hoYWYwUENhZklkMkgwK2pRbkUvKwpyVzRLT3dYQUJuTTVJQXhJOU11T1dGR0VmTmc4VGF4ZW9IUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-28T23:04:16Z" lastUpdateTime: "2026-05-28T23:04:16Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mrf7v" reason: AutoApproved status: "True" type: Approved