--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T17:56:07Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T17:56:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T17:56:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T17:56:07Z" name: system:openshift:openshift-monitoring-2mng8 resourceVersion: "8264" uid: 70fdc078-3a7c-4ace-9266-165adb1b5c6a spec: extra: authentication.kubernetes.io/credential-id: - JTI=386f7078-5d9a-45f9-977d-ad656d268159 authentication.kubernetes.io/node-name: - ip-10-0-132-106.ec2.internal authentication.kubernetes.io/node-uid: - 0245a326-7e37-4b20-9292-14deecda7491 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-wplrv authentication.kubernetes.io/pod-uid: - 4f93890b-e678-4591-8604-de9e0ff75905 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 8ee610b7-753d-430b-9a17-f34ddd570f64 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUw4ZENpSHpjTkxHS0Z5YkpOcXZEV2d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXlNVGMxTVRBM1doY05Namd3TkRJeE1UYzFNVEEzV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUkJqaUJZQWE0dkJ5aXQxZ2g0dy9iTApKbFk5UkhJWDVvQTRERnA5bGFZcGRrc0dSRWVsckZJQ1pDemFlaEpSN3NuVlAraWc4TmIrNXFPSWZKbWVtbkVrCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFFNmJxR2l6ODZVRlNMODBzc3kxRWtyR3FNWGZjbGVaUE9pNQp6VTNoejlqMWVTVHIvaEFrV1JreUR3cGJTbTQ1QlEvd0VTVG56UjJ2c3BKM01mTDF1REl3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFHeXNDSC85TUxTRmZDdVZXSzVsbGwvMHhUaDlCem8yT29TT3RoRTVKdWhITGVRUVBCZ1IKczVxY3Y5YTNIM3hha3BYTTN3WGxJT2dmYkNsWk1WMThadW1ZMDZqTktQeFZucnFsWVlYVTl1U1BiQm1CaXl4dApySHA3NjlPREdrTmNpaFRqTWk0cEpsSi9qZjRPT0JKTFlSZmcyc2lmSlFJUlF5bzhIR0tLNENjRkI4QlkzRXZ0CkNEbURwUm11QlBJMHh2MUlYZDdhV0ZvUFcyU21rTU9LK0RLSUFHT3o2VXNNb2NJaU9jWUNzQjhaSzdmQ3N5L0EKNmNNM1VxRHdzNjlUTTRWeXZaYXcvbC9sUWRiaXYwUy9jUHJiMUV6Z2xuOWZ2aC8yNkczVVlDWmRyWm80K0JxMworS2Zxc0U1K1orNzM4YXlEcm52bzQ2SkZ5U3hVR215NStJTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-22T17:56:07Z" lastUpdateTime: "2026-04-22T17:56:07Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2mng8" reason: AutoApproved status: "True" type: Approved