--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T16:02:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T16:02:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T16:02:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T16:02:54Z" name: system:openshift:openshift-monitoring-2xdps resourceVersion: "7516" uid: e63d3805-9ca1-433b-ad42-76ea7f378d53 spec: extra: authentication.kubernetes.io/credential-id: - JTI=017277aa-d5c1-4290-bf7f-e602aa33125b authentication.kubernetes.io/node-name: - ip-10-0-137-172.ec2.internal authentication.kubernetes.io/node-uid: - 702e0225-c750-436b-a4a0-27728ef6dec3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-4nbnm authentication.kubernetes.io/pod-uid: - befb7be9-0852-4486-a536-219bb03d51f6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJGQ3NtbTlaeXdFeXk4enlRalhBQXpaVXZvMEcrbU5DamlmNG5pVTVLWHJObWlYTkdMOEMKbWFWZ0pQaHFkR0JmSjU3VEY3MzdHM3QvQ05nMVdmSmpObnlnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQp1ZE9GS3ovdCtKbnk0TTFaWldXS04zbGlPRVNoVzNiaEgrSS84ZTg4WDFVQ0lCS3BPZnBvLzc0a0dDMkVXYWtrCnNKVTNBOWZJWklDekNyVVhVL2ZLeFl0awotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 6ba27b98-303b-47c7-921e-feb38e969ea3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTUEwbWtlRGw1U2FXM0pibVMrcVJkakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXhOVFUzTlRSYUZ3MHlPREE1TURreE5UVTNOVFJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGQ3NtbTlaeXdFeXk4enlRalhBQXpaVQp2bzBHK21OQ2ppZjRuaVU1S1hyTm1pWE5HTDhDbWFWZ0pQaHFkR0JmSjU3VEY3MzdHM3QvQ05nMVdmSmpObnlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUFyOVhhNVgwOWpPblc3OUtDRHg2aTdmOVdhVCtzWWh2dWNBMApUeUJHNmN0aVQ1T2ZRWFJyY0YxeWhsMEd3OE9PeXlESDg2MDRTczlkTkdSNTdtZ2N5VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVE1M0xpRzZacHZFb1A1RW5KQWtWR1BoUVFjMmR6RUoxTVZTS1l5c0liU21zTjBoV2R6UmEKcGpBamxLRURsbi95cEp3OEZHS3dlL0lvL1J2b3RlaWZubnFSaWNFaGlWRDZhWldhQjJZeGg5NmZXenFmZWNJQwp2U1p5SnFuY0VvMWxUYlE2ZEhBUlcveUFOamlqWHVPOERTT1NqODJqV3RlamM0N1JnQmNOajVnMkVLeXVadGVDCjloY3JPM2xEMHkxWGJaZ2JuNFpmZmE4WGRwK2lWL2JmWW1yOXJvbU1ESmRSdmEwTEtFZVRRK2Y5SUc3YU93Wm8KL0FFWFUvUVc2dlJQU0g3bWRTRnp0UmZRNG1ybkhwMlNUZkhGTGhxUlY4bWhHSmt4Uzh6NmpNTmUwRFRVWVFnbApZLy9oMDgxRmNrOUpaSDRSb3d6Y01BS0VTdHJJZUMya05RPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T16:02:54Z" lastUpdateTime: "2026-09-10T16:02:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2xdps" reason: AutoApproved status: "True" type: Approved