--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T17:12:12Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T17:12:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T17:12:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T17:12:12Z" name: system:openshift:openshift-monitoring-qbl66 resourceVersion: "8217" uid: cf15c351-17fc-46c5-b229-6a7bd66e7c42 spec: extra: authentication.kubernetes.io/credential-id: - JTI=964aac51-e415-460d-a60b-72138a738bde authentication.kubernetes.io/node-name: - ip-10-0-136-254.ec2.internal authentication.kubernetes.io/node-uid: - 03aa294f-baf0-4b88-b190-e50fc4b704ff authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-8whgm authentication.kubernetes.io/pod-uid: - c0c8d6f9-f026-4d77-82f7-af990167f381 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4c860a70-2c02-4071-a772-a5e13b1144f1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTC9SbFFkMCtWVG5uRmlxN2o2V1ZqVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UQXhOekEzTVRKYUZ3MHlPREEzTURreE56QTNNVEphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJKRjJhYm1qd1RtK3VnWDhBSkpscUwzVwo0UUh3OUNXdGQrZlhhSGZPbnYwaTVZNStLUURRRmVic3R2bStFYXFkQmpKYmtEYTBoNEdWTCtDUDl3dWFMcldqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWM0UElsamNJNG40ZmlDdDQxU0RzY2Z4dTNNSmFrQ2ExUHVoUApOMElMakNITm95eWRJb2g4QUkvSGxjeFpjTzYxeEhKM2JWem1teHlyaUNZVUY5YVMwREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUtDNzNLamVBMnRqMUVuYU9PY0d1aFdyRzBpTjVSbmQ1OW9qTUErTkI4NXQ5cm9qNDNCVGMKL1oramJpRVdZbVR1bXh5STN2VlE3bjZ0a3g2RTR1VGRpdEoxd2VwUEpFdS9xT1VhRDZPZ1U5bXcvNkdXbXQ5TQprNUM1NTFzaFk3S0lOdm1rRWUzUkRMU2NQNGFnMlFUdFRJK3VvMGorSWlsNXl6ejA0cTI1OEhvUDBJT3ZJOS81CjNEK3FxY3VjcXZDZHpld1Y5WlJKMGp3ODFOL201Zy9mK3NRYnRacHF4RTlJbUgzVGMvWVFXNHVNVW42WnRuWlQKWHlUb3luOFNlMGNxZnE3d2E4RGs4eGZQQ01xUDUzV2hmeGt4VWJSNy91eEFIZkRWQUZ1c0grMklVZUI2dkU3SQpsN3MwaDFyaXgxbmJqVlFRZ1VpZ1ZEM0RoTTRycE5oMnFnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-10T17:12:12Z" lastUpdateTime: "2026-07-10T17:12:12Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qbl66" reason: AutoApproved status: "True" type: Approved