--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T14:16:43Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T14:16:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T14:16:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T14:16:46Z" name: system:openshift:openshift-monitoring-qrvjm resourceVersion: "7976" uid: f8291669-70f0-457d-a54b-2c29ad7b0057 spec: extra: authentication.kubernetes.io/credential-id: - JTI=b600185a-add1-4011-a937-2ce608e4ef86 authentication.kubernetes.io/node-name: - ip-10-0-131-57.ec2.internal authentication.kubernetes.io/node-uid: - 2ab3ffcb-162b-4543-815a-0cbd1b859c66 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-47h9n authentication.kubernetes.io/pod-uid: - 9008fdf9-a87b-4914-8469-d60013b1f55d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 31dc6875-b091-47e4-8f7d-3f3275d677e8 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUpmck5EYXIzNXBBcjQwZ09oamwwenN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXhNVFF4TVRRMldoY05Namd3T1RFd01UUXhNVFEyV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1N2RFJhTFJRNkx1ekVzK3lJVHltdApOdFdIZ2JmRFoveTlhMVRCWkRaU3NlQURzc3ZFTEk3VTZLSE5HMG54NkR4OThlaTlQRFcwamJTQUtiR0pyZGROCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFIRmdnMmJ0ZjBncGlkNGhuVWNmcE5SOTE2Z2RDeWoxZEl4NQpHcFhpTG9iYXZYMXk0MG9uSHJ5QXlrN2JRVm5zNlZGU1VQRXhtVHZQUmJha21iMkREMUV3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFCZEZPSnJWSzJ3UXB0SmRCY2ZHU2FKK2tFbEFRZTVWRkFsWkR0TjBlRFNpaHFhaGNXY0YKbnpqWmpqbDU3NEtVZXFvZFFXaEFPZ0x0Rkludmk4WjdqTUlPREQ5S0d0R05zK0huSHh6ZEpaQUhQRDN6K1VZNgpFWS9FVWphQ1UrYjBkQ3V6ZDRzRHRMTFlLUStMNmdhWHNCMXBhZHlNejJCNFdCTE15cVZzV0JFb2lEdU9ZQ2lPCmZ5Ymt5c3NzV2kvWmNsajU5OFNyN0FyOGc2eWtoY3BiQkZrdXRUU21SUmxNazViZjY0Zk04ajl4czM0YllDUnMKZGV0azZ6bDE0c0tZd2cyVEwwRTYySHRORWI2bnVKMkY5VnQ4SU5qcjJzcVBXVWI4TVZPL1VRNnFQWjBDdHVtYgp6Lzl5cmlQM29iWEh0SU0zck1paWJWNkwzOTBiZHpQKys1Yz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-11T14:16:43Z" lastUpdateTime: "2026-09-11T14:16:43Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qrvjm" reason: AutoApproved status: "True" type: Approved