--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:59:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T11:59:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T11:59:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:59:37Z" name: system:openshift:openshift-monitoring-q9hbz resourceVersion: "9288" uid: 03653e2f-63a2-4158-a649-d6245670244c spec: extra: authentication.kubernetes.io/credential-id: - JTI=654fec21-30b5-4c1a-89fc-9bd380582a69 authentication.kubernetes.io/node-name: - ip-10-0-133-80.ec2.internal authentication.kubernetes.io/node-uid: - 8892c324-b48b-45dd-ad11-40fe680756f0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-xb86r authentication.kubernetes.io/pod-uid: - 852bcbc1-0bb1-440d-b031-180317de8131 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b7146acb-8bb4-483e-bb5d-a4ef0da1f26d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRWkN3d2hiUmJGdnEvUXRBR0U4SHpRekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1Ea3hNVFUwTXpkYUZ3MHlPREEyTURneE1UVTBNemRhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJDaFU3U0M5WDRxTDRQK1YwbS8zeitVVwplRnVCUWpmeTIrZmRSd0lkTktpckVKRmt5Q3hXbkFQdWVQbzdtMkp5Q05kVmJwRW5rMW04QjlXT2d1MUJ4YzJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVRIZUJsTTZBNDFFOFZTU1dNRksrYTFFa3VDMi9ubElwajdjNQpldnJ3MHlMbzIzZTMvaE1sWThwaGNQbDB0RHM4b3k5aVUrV1hRSFYraHNTMU0vQldnekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUltUEEwRTJTeU1EbHdDOXdOcDhwcWJLMzRTMGhRNVpjUml3SUkyQW5DK2FwcFQ0TTluT0IKQ3BramwwVVY2WmErRzBqQ2JzNXRWMWVwazNrVlg4TEJscnllYXRLc1oycE4wT0VEUnpEWXRkOHAzYjJSQk4zZgp2Ymw3bTlMaUdNNjRGVTNhN2xIRnE4enMzTXozRjlyM0lUeCt6UDMrS1dXb2llS2NVZXhwcXdoLzRxVnMvRVFmCjdGRkhDRjRmVnRUOHZMbFRWRloyc3M0SldXczRNYk5ac2VmUlVFQ0x1ZmhQT1llbDNPK0l6amxDWmxmTVR6QkMKbk9jb29YL0tpRXFSQ09iRUZHT2pxVmJhTDdhbnRiNEdvSy8vQ0psOE9XaFhGS3lYbW51aHoxelhPbGxxKzNaQQpCVmllM0JiemEzK1E0U3E2bzlYVFhkWFh1cUJiZU5sZXl3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-09T11:59:26Z" lastUpdateTime: "2026-06-09T11:59:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-q9hbz" reason: AutoApproved status: "True" type: Approved