--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T12:03:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T12:03:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T12:03:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T12:03:43Z" name: system:openshift:openshift-monitoring-67k74 resourceVersion: "8133" uid: eab1ef16-3f81-4f60-b22e-a461547fa5b3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=b8e333de-a0d2-4cf7-b932-47267b76e9c5 authentication.kubernetes.io/node-name: - ip-10-0-143-107.ec2.internal authentication.kubernetes.io/node-uid: - 4663553f-eeb9-42bd-9313-f1aff7620750 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-cxxpr authentication.kubernetes.io/pod-uid: - 59d9f112-d3ab-47da-8873-d13561388b67 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKbG5VRlR0ZUFqbndOVWFsNEF0Y25TczB1Rm5QZVlEMEZLL3Y5K0RpTmkrZ1B0YjBTeFgKYWw2MjY4UlV6bkpWTEUrbVd0c2l3N1RZT2txZythYUhJZG1nQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCUQpTSDd4ZHhWYy9USUJ1REo3eU9HWkxyd3FIbXFqaTQ0Q0dQQm5WZEErclFJaEFOMjJ3OEhiWUc4N3hzOTRmNGwrCjNmQUJyNkw2RGkxOC9rMXJzVnNMSkI4SAotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 9c75fcbf-1927-420c-ac72-9ed7d0c3680a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU5JNHRTSng3ZXdLRlp0dHlQRHV4dUV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056SXlNVEUxT0RReldoY05Namd3TnpJeE1URTFPRFF6V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1paMUJVN1hnSTU4RFZHcGVBTFhKMApyTkxoWnozbUE5QlN2Ny9mZzRqWXZvRDdXOUVzVjJwZXR1dkVWTTV5VlN4UHBscmJJc08wMkRwS29QbW1oeUhaCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFHMHMraEVHRjUreTd1cHdnRE9saTdLU29mbXdqU3liMFBFMgpySFVPaHNUd0YzanlRcXpLdVdyYkd4c2o2TjVrYnBDVjdKTzQzVExwQXd3MW14dTg4RXN3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDcVFEQXFyKzlNS1BCdE9UbTFybG9hRDZHMW51UUlJUjNGL0hWWVJpZjlod29aT1NSbmYKbVlwYTRIejVFUjJJYWtKWnpBdGVCQnJPRGc3YTlVR2pTUG9GRzArSFZOTnNWNUo5YXdINkdrckJiWE94Uk1aQQpkeU9MbDIxU2VjdnRxRC92OTJoeWwyUyt5K2ZTUG5OZUt1bk9OZERCNy8zWExZWmluaFZ6Y3dIdit6ZWJVMmRtCi9hc2gxSWQ3MHEramJEanViMk9OQ2Y2aG01bEVIZStoUFhqeHJUL1krdG9xL2VkK29BRzFVV3crUTRVVGpHRzgKNjdWbVZId3E2aEMwNVdCTm9zN0RIYVlITGxLV1FkNldJVnlHNExuVERWTy84cVQrVHczQVBCNlBFNEVhdm1HNgpIWTdUWG5XRGRYcEZ6VE9hT05GeGN6R3lJeVlhVlNOZ1FhZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-22T12:03:38Z" lastUpdateTime: "2026-07-22T12:03:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-67k74" reason: AutoApproved status: "True" type: Approved