--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T17:21:27Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T17:21:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T17:21:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T17:21:27Z" name: system:openshift:openshift-monitoring-zpthd resourceVersion: "9399" uid: b461ed4f-b373-49c5-b377-c795edf3e0e0 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f90f6339-168f-4066-ae7a-0c18c10892da authentication.kubernetes.io/node-name: - ip-10-0-128-235.ec2.internal authentication.kubernetes.io/node-uid: - 21146584-ccb7-4303-8dd3-f0b4ef2f34de authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-nh2hz authentication.kubernetes.io/pod-uid: - 930aa645-7318-4c90-850d-560c1430ab0f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 27c6befc-35b9-4d97-9b3e-782bcede48e5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVS83Q3A5MzhJZ1Q5QUdqeXFmRFFoREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1Ea3hOekUyTWpkYUZ3MHlPREE1TURneE56RTJNamRhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLc0h0bDZtbUJsMjNWZldaZ3FtSmtRbgpySGgvQXpxbWRYc3F1cHRQS0xyVlRzSmxYamZPcGxRSU1BSWpZK2tRMStxckFYelM0aHFvOWZiMzlFcjFyQmVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWhVaWcwVFlkSTN5TGJ4REFqa0E2akIvTDJZcUZmdDM0NHA4MQpyTnNIRWk5T0YxSFBTL0NlYTVYSjN4MDI4YTY5WkhEK3AxOWVCenN1ZzYrSXV3K21RREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVBMNHVvUEhIaHErZzFhZWp3YWc5bFNHR0ZrQTZZM3Jzb1hjSTFlZG5BTGtSRUhSd0RjVjIKdWRqbCtUN0YxTkRuV0g2ZFkwbk1jL3JWR1dHenBlZ29WZFFGR3hxUTNGc1NpK3MxcmJ0alZFZkp2OFRWQUVqegovbDZwaDJSMk8wVCtZUEkvQVlMUFlkb2R5ZWEwR2sxQ3VxbE1KdmNhZS92MGVYQi9TcWN6eTg3b3BWTVdiVjFqCnA0UnRzZUZBY0NSZjlPN2kraE4rNE41M292NHBZOFpSU21qNUxrN0FoZHVCb2ozQ0JzZU9pQVc4ZDRxN1FxMkMKK1hWMVJmcGhZMEovWkdudktkNkxOMHJUdXcrSXJsL2pKMU9TL1pCL0FtbmNEUGpkV0NqSW4yd0tBTFBLMXJuOAptTzZBc3V2ZUxhMnMySTBGS3c2MG4vNGJjRmNZQzFVTUx3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-09T17:21:27Z" lastUpdateTime: "2026-09-09T17:21:27Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zpthd" reason: AutoApproved status: "True" type: Approved