--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:32:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T12:32:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:32:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T12:32:09Z" name: system:openshift:openshift-monitoring-7xzg5 resourceVersion: "8312" uid: adde9ee2-0fd6-4c10-888b-5206935ad7b8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=806de12d-87a5-4c72-8f65-e922886ff178 authentication.kubernetes.io/node-name: - ip-10-0-140-13.ec2.internal authentication.kubernetes.io/node-uid: - e0448312-e51b-45b5-bf32-08afbd230192 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-h8nd9 authentication.kubernetes.io/pod-uid: - 2f6907f6-6e36-42f9-99bf-829d16e1b3ea groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 31957990-bb04-41c6-8f61-47619d316ab9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRU3JFZHNHZ3U0NHZRTWxKTHpENzgxVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXhNakkzTURsYUZ3MHlPREE1TURreE1qSTNNRGxhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJDU21MRnpIbVBBWjVOSlAxN2JNcXRlVQp3aGpaSHRocjRsQmtmWjhlcmxlRWVJVW04Mlp4dnRwckZxZWtFR2VKaXdLRk1XZWdYL2dYOHlDTzNDUEFGSmlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXVWUW5WaEpTd2F0WXBYSzU3V3hBM0htUFdDN1JuSEFEdWVtcgorUXpQZ20zN0h3T0pSY0pDSHI5eW1JQXpKai9aYVZ6TlF3dWZEUFg2SmhZUkFGemxWakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXJoSjJ0R09wV3VPcHY1NnF1bmpPVHNpM1FrZFlIRjVhN3p0all0NW1EMU5DcElYeW5tU3cKcmhpRmtXQjVEdkY3dVFkcDFna3NpMG94U0N5WGNyKzdqK1orU1lDK2NHdXNobnZQMkJrUDJqT2VkbUpjS3JwdApuWWgwM2dkUEx4YjZWOERpK3RxcUd1djBYOHZTNHNrVWVudzNZMnhLdHlFeVArNzJtaXVpa2NZakxNQ29LeVR5Cmhla2p6L2lKZGVrc0dLKzZkNGlSeGNJNEcrSU1xZmxPcmtjelJzZ1ZXblJ1RzJtRVAwdnVTR2JEMmtiMkFUdC8KWE55Mjk1WDh5SEZvcjVDS2lKaXBrdzBTMDFrdjh6bjRxSG1BTncrS01QRFplekMyTFlwRmtJazJNcXRQVkNKTQpUV3ZNWTlEaVNVQksybDdPQ1l0cEp2MGNiSVUvVmx3cDNBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T12:32:09Z" lastUpdateTime: "2026-09-10T12:32:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7xzg5" reason: AutoApproved status: "True" type: Approved