--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T21:11:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T21:11:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T21:11:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T21:11:35Z" name: system:openshift:openshift-monitoring-x6sc2 resourceVersion: "7992" uid: 05eef443-d61d-46e0-bbe0-ac1b690ae71e spec: extra: authentication.kubernetes.io/credential-id: - JTI=c77e07f7-5a99-43ff-97ff-dda3957553c1 authentication.kubernetes.io/node-name: - ip-10-0-143-252.ec2.internal authentication.kubernetes.io/node-uid: - 07a2d55f-1725-4234-a5ed-bea7b187a9a6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-njxpb authentication.kubernetes.io/pod-uid: - 533714a1-f27e-40c7-8284-efe7ee67acf7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1081eaf7-566a-4ca1-87f8-a154eddc71fc usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVnFmN3VMbnZQQjA3LzlmbnN6SXJ1ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBME1qSXlNVEEyTXpWYUZ3MHlPREEwTWpFeU1UQTJNelZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGdzd0S1Y0cUUxQ0p6VGd5Vk5vL2FHbwpWQU10Z0dCSVlVZjVINlhMS0kzTjFsRW1aKzUzVG9TSnplc2JIZlZLTmYxbHZzb0hPdW9Xb1pOTE1DZXRFYmVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUtuUWpGQ200eUlXSlZVazBrcUNxME9QYTdmZS9aMnhYcnVtYwphYjJsT09aQm81NXo2YTI5QzltQUNVK2x2QW5mYkNLT3RxSTR0cFU1QU9XRU05anhUVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWhLU2c2enFoQ1FyUGJVTGo1d3hzcWJsRFFJTG5RM002dXZOUEJEb2xqcGIyYkc4SmdRYWcKaVVvSmxiSnFNNkpZcUxVcnYvU3NEcmRWOFNCeU1scnhwMm0vZkgyS3c5allTQXF6VWhJWE4zSG9zSE9jZXdYdgpaeHpTV09tbVBXYjVZOW1lY2R5ZlpLWEVkTy9rUFU2NGJOS2FhVVgzNWRjUzhIZzZWV0hveVN3VFo5bE93aHNlCjV5aDlzZmJIWHJHenVveUVJRFVIeUN2dVhlN211cjRnZnRYUmduNkgreGs1Y3VjRnYwSEhROTR3elpGY044ZzIKL3BSYUxOZS8vVENDM2p1NVU0YXNxeC9uTGhYQnh0S3I4U0dBOVZnNTIrK25EbnM0TlBhbXJDRzZUcG5Pak83QQpJRFZodGI2L0gvMEdFUjVOQWxaMkdPMUphL1UvVTVPWWpnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-22T21:11:33Z" lastUpdateTime: "2026-04-22T21:11:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-x6sc2" reason: AutoApproved status: "True" type: Approved