--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T23:07:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T23:07:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T23:07:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T23:07:33Z" name: system:openshift:openshift-monitoring-t7ggs resourceVersion: "8607" uid: f2470fda-40b8-473e-943b-138af290ab00 spec: extra: authentication.kubernetes.io/credential-id: - JTI=066b24da-d4ce-44da-8d0d-5f78d4ceab00 authentication.kubernetes.io/node-name: - ip-10-0-133-222.ec2.internal authentication.kubernetes.io/node-uid: - 52e6620b-63a2-45df-818f-11839ee5ffde authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-r2vwj authentication.kubernetes.io/pod-uid: - b1a856fa-a9da-41e6-8a80-da9ddc2d5cb5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d6ef9ca5-ff63-4611-a7dd-b2f7830bdf08 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRT3FpalAyTGx4dDlqaVVjZEdvZVFTREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UY3lNekF5TXpOYUZ3MHlPREE1TVRZeU16QXlNek5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLWkREamtyY0RqQWRpaG52MFJrdE1acgpZbDkyeXY1Y1hYM1I2K0FBeXpWQnRyT2FxRlo0NWFyd2lFeWJVNTVzWVpTSXJFS0srdTZhSXRuYXpuSlBlbGlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVJoSUUxL2dwR2pRL2JNbmxHeFFGZVFObG14WU4wa2dzMyttQQpqc0JUT0hyRTA3K2FCWFlXWlViV0NRTlhIUFBMeDBvR0RCMVR5WUVjYWF5c293c1p4VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW5KRkpoWjNBY05ocFBoaFN1UXlFSmZzTFg4Y3JPWThGTEhaYlhZOS80WW1YZ2FFendKMHkKOWNqN1ExZ1AxVDBLVUVwTHIrakZLS1VwRW51QmhINEYwR1E3Rmo1WnZReGNLdGxsQTE5Nm5kUTVGYVNwbFk0awpXcDBlSTZ6WlA4dkw1NG54SWNOMVhOSkNnVmNhN0s5R2tqWm9XZTU3a2MvOXJ3aUUxTk9TK0FQQkVuMDRBNkZDCmxxL0YyYnhYR1lNTlFZbFRGcmhkcVlmNWsxbG1SRG5OYkM0TGJLVXlnL3RWajZ5c09WTmdKSkl6MUcwWERWb1YKcXh0TldLV0hZT0M4Q1IybGp3RUlEZjMwTlVQcmlueVJKY0JOcjVnSExyVVFWL2RBMCs4b3h2bkxTTngzY2lvMAo5L3pJNXo5M1Jhb05yaC9RandKUWhxV2dDUGx1eG1ja2pnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-17T23:07:33Z" lastUpdateTime: "2026-09-17T23:07:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-t7ggs" reason: AutoApproved status: "True" type: Approved