--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T10:33:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-21T10:33:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T10:33:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-21T10:33:05Z" name: system:openshift:openshift-monitoring-6g8n9 resourceVersion: "8626" uid: 6cd1cdac-daa0-4dfd-9d07-bbbf847c404f spec: extra: authentication.kubernetes.io/credential-id: - JTI=3fcb4717-985a-413d-b7ab-0c37bb2f217f authentication.kubernetes.io/node-name: - ip-10-0-140-254.ec2.internal authentication.kubernetes.io/node-uid: - b30b45c4-1972-4a2a-b6ff-7de77104556f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-jh4mw authentication.kubernetes.io/pod-uid: - a0b9e259-f4b1-4bd3-b191-fe08dbbd52c5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5da32dac-ab56-4a1f-bcf9-c3e8fe916794 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVWVqVnBNT2V6ZFZXR2phbWFDMksvakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qRXhNREk0TURWYUZ3MHlPREExTWpBeE1ESTRNRFZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJIZCtNRVRrOVdtNyt5MXdvL2hKQWUyLwpTOVplY2FyK3gwbVhpcEJlemJWS3hMWTBmTmNYWXlRemJVdFlocUwrNXVabXgwaU9uTmdISWlXWHJpRXJWeXlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXJjT0VmRDNOYnFsSmk4akpZV1Z1MkdOZkpUMU8zZjU4YTJzRgpVL2Zxd2xQcmhqalpMaTkvaCs2NXprNkFodW1RN2czRG13NGNkOWxLM0g5L0cwVDJoVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVZzWmtzampBRDVUV1JGYVBhREt1OWw0c2h5L1Qwa0pxMHY3emtnNWUreVJUY3F5YmR4N0EKKzFoTlNQc2l2OFB2K2FaSy92NnlGZU5uTDgyTTJ3c1Rkczd5QUc2WUxncmNsTzZhSWtlRlJhRm1rZ1NXWlVDTApTa3pqVFF3YWcrOTQxd2dVdUZ4Ri84WmxnQ2Y3Z3hYa3F0elFCbWkybFpnNzRWYTNPOEJqeUE0ZGRtSHRKSGhtCkI5dFQwV2xyK3p1eVViMm9BdTZOTFVjeGp5Q3RrTFh6TkVPbjhSS2RYTnlra1hLNFdDN0hxNnAyK1NQZ202N3gKS25hc2cwSDJEWGZHeWJWZkh3b1B0RnZHVEQ4eGFJbnBpNFE0am5xVVpUSUJtZHRRdjhkcDkvWm1FaDhXRlk4aAp5bnFVWGxoSzg1aE82QWRMb25CTW1aMTkrWjRLVnVscFhnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-21T10:33:05Z" lastUpdateTime: "2026-05-21T10:33:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6g8n9" reason: AutoApproved status: "True" type: Approved