--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T20:37:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T20:37:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T20:37:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T20:37:49Z" name: system:openshift:openshift-monitoring-mgn7s resourceVersion: "8181" uid: f6daa710-4103-43d0-9263-4b5173a8779a spec: extra: authentication.kubernetes.io/credential-id: - JTI=16e63cdf-26c3-4fe4-a413-05dbca92f9f2 authentication.kubernetes.io/node-name: - ip-10-0-134-39.ec2.internal authentication.kubernetes.io/node-uid: - fa663ae1-7b42-4760-bd59-b66f641491f1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-qtl8n authentication.kubernetes.io/pod-uid: - 71beb5de-c8d6-4dec-b5ac-8fc153f78270 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2c26c4f5-6c1b-4db9-96c2-c3d0be2ed8b2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU8vVDV3ZndPY3c1N2c2YmFXMm5DMjh3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTJNakF6TWpRNVdoY05Namd3TnpBMU1qQXpNalE1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVEhkSkFEcWZKclV3VHlkbDdpU3M0UwpuVW9UR0I5bmlJWkdTems5SmNJcUtTMXczQlNNWTBXNWtudENPcnV4Qk9ldGlXeHBoSzdtSjNNWDF1bDZLeTN5Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFQWjU3eVd4NEhGVnpNZmEyemM2TzA0TWhUb2hQUnNRaldWbgppNldaUHkydlNtM0c1SFY5K3hwcm5taDQrQnJlVEtncVNJMnNtQ21ua2FCak5KeWRpMjR3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJYllXM0h6OTlEa1I3dDAwTEdqU1J2K3hYMHBEa2dTNVVzSWczSCtpT0NKak16MmpOT2YKQ0Fwd2FmWDJFUFdBWUdXc0Z3Q0pLRktZQnFLSVNvRVk5dmIwU1NrWTk4WUVtbnR3ODNmUC9YTHNLSmlYbk5obQowY056TWdWZUg3T3JIVUxPRThCUURhV1YrNFg3eWFZRGI4T2lsK1RiUzR5L0ZkUE56TmRTWTRYa1MwekxST2dHCkJjSGNjd2tmWHR6Q2UwY0lieXBvRUpRMklZcUNOYmQvY1l1cm9vUm5zcmRiWXVKRnZpcUNzSGxxZWw1Y0VXM3oKRXhxR09OK1NQMXBXS2pQTElUQWx6a3Y4U0Zvbit0OGpGUDQ3N0xhVmEva3BocVpLSGF6RzBXTG9nOWxLUFNYMApNYUpIT1J3L0RIaUo5aVBKTmxTbkhRNmxxTG41ZSsxdXFoRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-06T20:37:49Z" lastUpdateTime: "2026-07-06T20:37:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mgn7s" reason: AutoApproved status: "True" type: Approved