--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T15:45:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-05T15:45:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-05T15:45:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T15:45:11Z" name: system:openshift:openshift-monitoring-m87rk resourceVersion: "9003" uid: 146f76bc-0606-41e0-92fe-f436b829b9d9 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c43c937b-654b-461d-a6bc-02af22640763 authentication.kubernetes.io/node-name: - ip-10-0-135-97.ec2.internal authentication.kubernetes.io/node-uid: - d81569c2-aeed-4502-a9c4-bb274027e595 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-qcrqb authentication.kubernetes.io/pod-uid: - cec4570b-6b43-4593-a55d-f60c20b212ec groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7ae4c4c0-9fe5-46a6-a387-c945032f9b4d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUxrTWZUaWh3blVxaytLR293bFNVZDh3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTFNVFUwTURFeFdoY05Namd3TmpBME1UVTBNREV4V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUURNYVp6Q1didlFBTU9JeU9KdENnaApSdVBvRktCNTgrT2svUjk3cWpPemxUcUdmeUVwVmx0T1JpZXhQVlJuM242NDhkbEFTZ3JMKytWRzNSRWhjUkxSCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFBZnB4SUV1UFdvWWJnSTVmdXNXUjhQaW1zZ1ZtWHdBbUd6LwpEU2lNc09HSzE0U3ZZcGFrRVc5OERMNndsZmlhWUh2OFhqMGJWdUkwaTloVlRSSXZHbTR3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFBWnRNYURmbDJETG90MDJqVE40WkVGeUl4TGpkeVlCZ0dFbm8wVXFWY25EOXdGS1hKaVUKSUt4aTBocHg4aFF3NEd3bmgxaGtoQzVIQWZPYUFGd2lrcmx5S2U5ME1PMVVhdUkzR3lJNE1UQmpobjNjQnhKQQpEVURXbkdaMFZ3LzYwVFI3Uk1PKytmeWp3U0lJZFVvYk90WngrYUE2eGVINWF4MGljWlU0RVZRaC9Xd3pld05DCmZ5cEdXWDNESHd0OUsrb09QY3gyMGczMk0zSkJhT3VqYllBQWgvUjZKZWZJMEVZampDK2hBeURxUTdGZjJwSEsKSFpjZktOWEM3VVhpTDJIaStBRW9jWmNuditlUy9DYnVVcWY5NG1VeEZlMlRqUDU3dG53TFVLdy9SRVhlS2I2Qwo0R1VzZGNFUElialB2N05rYWRFUmZPTHZOWDZUcktVY2wzOD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-05T15:45:05Z" lastUpdateTime: "2026-06-05T15:45:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-m87rk" reason: AutoApproved status: "True" type: Approved