--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:18:43Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T16:18:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T16:18:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:18:49Z" name: system:openshift:openshift-monitoring-h7jn9 resourceVersion: "9018" uid: 219a3e0a-2811-4eaf-b57f-92800d510d64 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6e3ee431-56e0-4f28-a173-7ec14fffec30 authentication.kubernetes.io/node-name: - ip-10-0-135-70.ec2.internal authentication.kubernetes.io/node-uid: - 1193fc1a-c585-488c-a05a-b3b18e948f09 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-4skw2 authentication.kubernetes.io/pod-uid: - 2528af38-f6e1-4c69-859a-6d00a5301ce4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJFY3F5cURXOFlKbFlLWHBJd3pkV2ZhWWUrZDBmc1haOHdlTmhJMEdOc2FoMjZUaUlFdUIKQW1SSlV1YVZPd3FrUUV0SVlpOHpWdDdSZER4RkZ1Qmp4cm1nQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCbQpFQ2hHOGFlV1p2MEpRZHROdndtcCtYNkoyRTdwcnkrbW5IMGJnT2RTNHdJaEFLTFdydEE0NHRBcWRXbWF3dnE0Cm5ROFFwV2pidk1VdG4zKzl3Z2d1Z2RzKwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 80e9cc51-38d6-4e92-98e1-fe9a8fcf26ad usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRSWc1aGgzMjV0eVFBbTMyMnVWNzRlakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qY3hOakV6TkRsYUZ3MHlPREEzTWpZeE5qRXpORGxhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJFY3F5cURXOFlKbFlLWHBJd3pkV2ZhWQplK2QwZnNYWjh3ZU5oSTBHTnNhaDI2VGlJRXVCQW1SSlV1YVZPd3FrUUV0SVlpOHpWdDdSZER4RkZ1Qmp4cm1qCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWUwNkxrbElnU1llNGM4MHNpdTJxMm1RNnJQNEtFWlFOdUJjVQorcVROYVQ4MER4cFRHTlFsd2FIdWdFWm5ETmhSczFiRnNZTnFic21Za3l6TWMxVnMxakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW4yVkVDZE83NGJEalpXOFIrcDNSa2ttL3FBbTlVa3kwR3l4T214S2tkYlphSXcvZUJnQTEKU0FYc1ZwSjUzMjk4WVZtR3cyem02b0orRnM5UFU5NXh3aGhzbUFNWDVsSDEwL1FCN0VIaEdFNXRsalZrU3U2Rwp3WUtPMEY0dHNiM001bUs3WEd5Tm54d3JEWE42TjhMVC8ydUxrK3RoVjFDWEdjdzdleXJTNXB6Ym9FVmJUczdlCmIrWk1qUjFpVFlSUjg4Mlk4L1pVTDlBczdsMmh4TCtSSVh5T3lMMUk1bmlwVVllNy9TVDl6bVVUcTFsSURpcXIKcGxkVkhVRjVzd3RtODgwQ0lJWnZxQ3M0QWtLZnJvRit6UHl3NjVIdExqeUEvWUgvM2RzaXVnWVo4TWk0SWpScgovcW9mUjRFOVU0Y00zdGh4eTJXMk5YR3R4cloxbGlsQW1BPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-27T16:18:43Z" lastUpdateTime: "2026-07-27T16:18:43Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-h7jn9" reason: AutoApproved status: "True" type: Approved