--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T16:58:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-29T16:58:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T16:58:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-29T16:58:23Z" name: system:openshift:openshift-monitoring-vd66f resourceVersion: "7920" uid: b4198550-321d-49b3-97dc-aa1eed0761d4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d4ebe202-8ca2-4214-979c-d8dd0ff4d9ff authentication.kubernetes.io/node-name: - ip-10-0-137-133.ec2.internal authentication.kubernetes.io/node-uid: - 39a529e9-1527-44da-8b51-f28f4cb240f5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-vbmm6 authentication.kubernetes.io/pod-uid: - 18d06c9c-d13c-4bd0-a23f-6ceffe36743e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4b210077-b269-4453-9e72-55f9b8ccb1d0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTUNMeDZMajFqdFhsM21JRHdad0gzREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qa3hOalV6TWpOYUZ3MHlPREExTWpneE5qVXpNak5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJOMWJKUnRPNDFEK1p6bXZ4V2RGalR6TAp4cFVGYW1GN1Q1QWlGRVAvczl0T2I1clhiTnZtRVUyWTQvV2tUazQ3Z21ITlJPV2U4QU53bWJwK3gzQ0F6SkNqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVpGazR2elcvNHRVYmlTRVE5Y0dqVkVkQ0Rwbm0rYlBhQTlJTAo1bXpNaWhaRTM2M3RQNnJxS2lMdHlteVR0VHdJTXBRTzgrYW40UkdDV1JnZmFyY01tVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUhpZmVIczgxU1Mrd01GQzd3bkVlZDI3VEZuVDRmdW9sZC9NTlZjb1FMbHBDZjJNdDhHMEIKZGhWYXUxSHU2aHVPS3VrUVF1NkRYOTM4TnlYRW5iRWVWKzRyb2ZGcU9idzRtNVNKYlI2OWwwalR6R2JsWHBDWQpxT25KLzRjYjd1bm5PNVpyNSttWk80aVpyUHlLVzdJZ3FSanNoZEcyMlB5bFA3MzV6ZXlZTmNzR3VNTU9RenBrCnQ0b3RZTEUweWNaK1ZrQnZDZHNvRjE4SXQ5bEEwUEplRjhRZ2pyUTY1VnNPU1o0emxBOTVJRUFiRERZVm5HaXQKL0ZIdjRFTjBIRG94c2pDazNjRmpaVTAvTXpEU3hDM2FSZDJiZDc2SS80R0JaaGJSMzlaWlV5N0d3a0wvdlBrYgorb2huOU1JMVozODNkOWh2aVFHbzdMeGN0RWV3RjlWU3pRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-29T16:58:23Z" lastUpdateTime: "2026-05-29T16:58:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vd66f" reason: AutoApproved status: "True" type: Approved