--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T21:07:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T21:07:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T21:07:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T21:07:33Z" name: system:openshift:openshift-monitoring-pft9m resourceVersion: "8129" uid: 5732fd70-14ef-4e79-b08a-f6b80341eb90 spec: extra: authentication.kubernetes.io/credential-id: - JTI=217f74b0-15fe-4fdd-a439-eca837917b79 authentication.kubernetes.io/node-name: - ip-10-0-129-60.ec2.internal authentication.kubernetes.io/node-uid: - d3663eef-c593-4c04-84af-e956a78b7a01 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-smrhb authentication.kubernetes.io/pod-uid: - 43378288-071e-480b-a104-4f2550a04243 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 307b814d-5762-4762-a1d1-c09677d6fd30 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTVFUQS9WTytIQ1JkWU9NS2pHNUxxREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UVXlNVEF5TXpOYUZ3MHlPREEzTVRReU1UQXlNek5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQeTEwc1FSY2ViR0xKUkFuN3Jra0E2SwptV25MeHc5aUxmN0dWbEltTzVseVFhMDYwaW1EbnRaaFVGTnIrUnRFMHprNktNaklqaXNkV2w2R0p3SXlQdUtqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUV1WEpYeWZ4aEcwdkRocDRWQld3VzBnbE9waGpyN2g2MXBiaApFbzNJMG9HUE1hQmFBT0N1Y1pwU0QxVDUxamZnVDV6Vis0bUZwNms2UzVpWmlLcExJREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQU53Y2pGVlpRYWpPbE9CM1FiUGFaRGdVWmhCdG9lMlhEekN5TE1ITEZhbEUrVUVCSEI5WkwKY2cwMjhmK0x4VjFwRE1BdllpclJHenk0ZmtIYVZRVVNCdXp1OGtXRC9OUHpvcUs2SXRGMHR2bldNWk44Qm8rcApTQmc1WDM4dURiRkU1allKbGp5ZkNJcENBeitHTWk2Z1JsRlRjYk5WellhN0tzVGo0M3RmcDhnTjBmN3UwRkU3CnJqTGJVWVVPUitnYXpTV3hUMVlMRmVQeTZNWWJ0dHcvS1JucW92QStFMk5ZMGpOQ0ZmRkJmOUM3eU1DazhLRlMKVlNGTnR3U3o3bllERjFpVmhNU3IwYVhON2FNalM0Y2dPWnk2S25vd3p4Q2Y4RldpNmp2UkJNZU8zazlJRy9qLwpGelpFbk1FR3FKYm9jZ0xXczYvUC93Sk5hOEZZb0ZqZEx3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-15T21:07:33Z" lastUpdateTime: "2026-07-15T21:07:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pft9m" reason: AutoApproved status: "True" type: Approved