--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T06:07:11Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-06T06:07:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T06:07:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-06T06:07:11Z" name: system:openshift:openshift-monitoring-2hgvh resourceVersion: "9328" uid: a929c7d1-9fc1-41c6-a4f4-48ad15d8d165 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0d472c75-3390-493a-9769-53e2c6d716dc authentication.kubernetes.io/node-name: - ip-10-0-139-4.ec2.internal authentication.kubernetes.io/node-uid: - 39b9803c-fbdb-4e3a-ac87-d969305c48f6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-nlwwx authentication.kubernetes.io/pod-uid: - af825a93-880c-450a-8a94-494b56a17a88 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4ef08388-f382-49da-9e25-9e8bf34818db usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRDhyZXh4RHdKbGdpSlk3ekFKMFYwakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EWXdOakF5TVRGYUZ3MHlPREE1TURVd05qQXlNVEZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJMT3ZEWUtNNDVmQTRrQlYzZmlSS3AvcgpoTCtGazVLMUNkaWFIQTBNemdUdk42SWdxUDZIWVdYdHhjSDFQREtZbm15YXRZRXl1ZUJTdUZma00zOG5kaVNqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXRZTFFVOGI5cmp3R3RLTEExNGtLY1pLQmJrLy9GUk1ab0lTawpLbVJFTmFNTGFpa2c4VVF3UnZkVXpLTmVaMzhDUmVTU0x6cVAySjVIUHUraTY2bjJEekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUxnZU4vaGRBOFdkVGEyQ2R3YmpnT0dCRTl2RHBvYVhqcWk4Um5qZDMrdFZ2NU5yL2JrOTUKSUpjY0lvN2lRVkg5dFd2WjhyNEJ6VlY0c2k1SkZud2tRbmswMFpMMFN0MC9lYTljdVR0d3o5b2NEUXVqNTZocwpiUDJBaFdhTVh3ajBKeU54VU00S2ZPTVREZDdxeXZTUnRYbnJpSlIxMlRVOGUxc0ZCSlVxa2NyQ2VRYnUrM1pMCjRTaEp3VVNnOG9hTWVENmhxdlF5SVZUMXVIdmtTR2hWbFd2bit0cEczY2hrdGN6UTVxVWEzbWQ5SWU4V0JMNzYKRXloRG9rVDZCWVRNb1ExOGlMbThXMWZBb2lrZXFNVWUyQXA5UWhTTitDM3BOdFZaajV5VE5lMXZmNlYxUnNEYQpsK1UxbTN3T3lydlVjOHlxSzJQdjYzOEUvSnVLUFlyWnBBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-06T06:07:11Z" lastUpdateTime: "2026-09-06T06:07:11Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2hgvh" reason: AutoApproved status: "True" type: Approved