--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:49:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T14:49:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:49:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T14:49:06Z" name: system:openshift:openshift-monitoring-hk4jf resourceVersion: "8423" uid: d4ae5b11-d536-4c4d-8a87-883700b21729 spec: extra: authentication.kubernetes.io/credential-id: - JTI=dab07f27-41e4-45fe-a540-bdf2c4833ae9 authentication.kubernetes.io/node-name: - ip-10-0-143-167.ec2.internal authentication.kubernetes.io/node-uid: - 35a3ebdc-2ccd-4f8a-92fe-c740258e57de authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-6p9ks authentication.kubernetes.io/pod-uid: - 716e7166-1d2c-4b23-97b0-9cb65e38f7db groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 57e968a7-d982-45eb-b67b-5ac681fc2728 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUtJT3FKakJHdUlXN2Jkd1JOMnZVRDh3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXhNVFEwTkRBMldoY05Namd3TnpNd01UUTBOREEyV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUjlsbFNHc3ZEaWpHcU1yNkV1NThMWAoxcnF1MjBiVUlNSHI4TmtBQU1kR1hpSUlmVHRXSjhwV3g2U1J2RERZMXpoRk4zLzdBdHZKNUoxUDZkRGlFbXduCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFHTGpRZDVLekRuZnBZcWNWa3pqQ1VIcjE2TFZQTmZwT1UwTApyNDBRM2cvVFkybzN6MlNCZUpUbVZrZXUyUnZjWERuY24rNWZLSE9zeTRIejJFenVWY0V3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFHTGZJQXgwU0QxQUtHcGY2WnhBL3I2dk9vZDJZN0N2THFZOGh4YXFuUnozUmg0NjN0aWEKbFphNzh3Y2xFcUNLVXlBT1lqRXBjQzdzeE1COVJ6Y1B6UU56eWhpdTN3OFF0QVIxWko3c3RtSVNOa2NJRVI4dwpRZHpNQ2IyNUtTQmVpeTJmaVQ5Y0xwd3A0Y0xVRW5lYWJ4RG1aVS9QbkFEK1BBTXNiZUNMUmY0TFFvQjhnb1ZKClBTeXM2YnRJWkZoVkl6TXdtQUxId3o1cngrT0RJNWlFNzhDaHE4RWp6T25QYWQrbmtxZFh3NFA2VlZRdndWaisKbmF6eGdoRUllb2ZMNE9YOWZUMTJpQm5IRC8wTU54QmpJNllqNDlGdW1pWDRsUC80QUJoTXNFN2Rqa2JFdEw1TApDRWdJeVdCUjRDYXcrY2VoZnlwWXcyZnVWY2lhYStNNkVnMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-31T14:49:06Z" lastUpdateTime: "2026-07-31T14:49:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hk4jf" reason: AutoApproved status: "True" type: Approved