--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T16:16:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T16:16:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T16:16:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T16:16:46Z" name: system:openshift:openshift-monitoring-md59j resourceVersion: "7907" uid: 3309ebf8-67e3-42a3-af59-8fb7a7706372 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a41541d7-eaad-4cbe-9d4c-efc3856a8c03 authentication.kubernetes.io/node-name: - ip-10-0-143-79.ec2.internal authentication.kubernetes.io/node-uid: - 9312424d-56f1-4b6f-88dd-cb106c6f23e1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-4blfd authentication.kubernetes.io/pod-uid: - 9c9fda39-70e8-4d3b-9e16-d767847f72e0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 60a67e99-63ec-408b-97be-d349d84a3711 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQ0lrRFZkbXR6ZnIyN2ZhSXB5VmdyVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UZ3hOakV4TkRaYUZ3MHlPREE1TVRjeE5qRXhORFphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJHT2VFQTZHb3Q3alZHck0yamhpTGJkcwpkVUw3eFFjOWEvdnNLN3NlRldYeVA3WFR4aFIyRG1vb1ZoZ3JtUWs2cUV3REMvZmdneDQ5aGQ1S2RuUGV2b1dqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQW5EaDV3WGI4Q1FmQy84MUlqZzVSMFYzNHpISUZ1OXI2eUZCMgpHS2RSOVk0dnJVa2xDaDduN0tRMEFvNmNrcUJGai9IeGM0aDc0cWwyeTJMT1BYZHBVakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWFYaTB2YXZVMWxTeDRMdGJMWGdMUi9ROTdja1daVmpaMmd2T2lPNnN5SGVoQU9Gbk03eisKUEpQYmpCOTA3cnBJVzBpd1poTnBaMnVFMElxclNlaGN1U3gxYW5WRlRlVEVLNmpoYjBhUUo5aWdpRExNaHZiKwpPUjFUeUo2WUpaYjJ6TWFWRFRhWC9JM3V6RnlvWFJVd0tmczlrYmFLa1VTaWMzaGVtTEpXNjlJVk5uM0x0SE1ICkl3Rmx5azljZEY3cldSUVlrL0paUjNubVJCVEhHdDk1b0IweGQ2SmtycmJOYWsyZzllYlNNRG9WOTVBU1c0NkcKVU93dXg5N1dKZnZFUXduVUU5Q1dleXVmRExGMHU2YldYN2ptUitBMVRac0pqTStQV3pVRTZLRXR5b0tYeGlPVgpjcDZPanFmYVFhR0o3Wm0wYUZDcTV4RVM2NWlRTXdKTXp3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-18T16:16:46Z" lastUpdateTime: "2026-09-18T16:16:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-md59j" reason: AutoApproved status: "True" type: Approved