--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T15:01:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T15:01:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T15:01:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T15:02:01Z" name: system:openshift:openshift-monitoring-zkmf9 resourceVersion: "7999" uid: 48497986-a092-4a76-a2b1-6e0ef6c99770 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a9dbf933-b752-4d61-bd8a-313285233405 authentication.kubernetes.io/node-name: - ip-10-0-128-244.ec2.internal authentication.kubernetes.io/node-uid: - ace800ae-8dd9-4239-9dde-30da409662cb authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-htn7r authentication.kubernetes.io/pod-uid: - bae090d7-7387-4e79-bd16-b249c31fe457 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4fe0df38-6cfb-4c02-ac6a-e104c216e181 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZGtmNnN4MzZSRVdMT3dQRVNzQjNhREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qRXhORFUzTURGYUZ3MHlPREEzTWpBeE5EVTNNREZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGbXA2RW44cHJaQkxTcE5mdnplWXB5UQpNNkpqQ3p1ZkVjMFBrWGNmTi90Y29Bd013Z0dXTm5yR3U4bFduTDFuMEdjZnV3QzVWZjlxRFB1UUpBUlR1NEtqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUJpQk9LRG56L1lmS1RqTGlwREJOMmhYcDQ5S2tobUYxN3AraQpzU1M4ZlNuTm5TeUNZbG5ZTW9Lanh4YWkwUVJpcVg2SUk4VjJ3d2dTT2tiN1pOTWJ6akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXZlRlRlMFF1SUhpOVd6K21sWm9WWGhKa1o1cUhuTERDYzdqRGFyNkZibit6ZkdJeGNRSjkKbmhHNHkyT3JaY1B6clBCbC9jMjlZUzBhaE5yclZxZTFnbXNnWHowNW9jTEZ0TWNwdHFUdGwzL0hOT1hKRmtpMgpTdGRTTkR3NTdEbnFTWDMrai9xR0QrMHlDNjhHaFJpWXp0S3B2S3lPNDkwT3NZbHlIV2QrVnY3djhJNDRTdEcvCjV2Tk1MWUxhU0hZdW1RZXlrWjBkSC9pU0FmbWptK3pNTjBRRmhpTzlsN0VaQTFzWkQrT0tzSjZRcVhTc2FqbHkKa1ltdloyVXFxZVdlV1JOYXRXWml3VXVGbmJQeU0wK3FLaTFyS1BNMmplYmZKWGw1d3YrOUM1cjRuOHV0K25HNwpaZXVIZzhoRENkRWhQeUV6eTl5YlIxaEp0Z28rNTZ6SGpnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-21T15:01:51Z" lastUpdateTime: "2026-07-21T15:01:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zkmf9" reason: AutoApproved status: "True" type: Approved