--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:05:42Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T18:05:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:05:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T18:05:42Z" name: system:openshift:openshift-monitoring-sp2rs resourceVersion: "8530" uid: 62da81eb-2c0f-45ae-a339-eee4aa3acb74 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f1c7ab15-1f5d-4714-939a-e24a6f66501f authentication.kubernetes.io/node-name: - ip-10-0-133-59.ec2.internal authentication.kubernetes.io/node-uid: - 30d5c8ac-4125-4e67-bc94-9c956bd7d7fd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-www4t authentication.kubernetes.io/pod-uid: - 687ecd78-2b3d-41ca-9db3-36d068a617ad groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 963cfc89-a0c2-49f5-bed8-0c71708459d0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU9nNTI4ZzJJM1V4aTFhOEs1WFhMY2N3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTVNVGd3TURReVdoY05Namd3TnpBNE1UZ3dNRFF5V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVDFpVFFaNVZRQU1wWVl3bjZ4czRZNQprdHh2ekMrUCtPZVJwUjJWdnhEVGdzT3Nvbm1IYjlVMmpVZ2luUjErdEZHMGlLa0NDVnc0NFQ2Y21QZi82ZjN2Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFGSXE2eVFDWGRpWHczWFpWQ3lsa0ZjYmsyNzMvZEQ1bWRBdApSaUtrM0FtaUpkZ204ODNjNk5iQWFpT2UxbXdpdUMxWXBZSEJnd3FISWJwRGRyWW5mcHN3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDN1Fod3MwdFlnTFhoNEJneHdUZWlQazJxekZxRTBDOEltQ0ZGRnlSVitwSi9Cd3NKUzQKWjdTSC93RVU0OGYyMDZ0NkVsSksyNTV5cG9ialhhWnZNU2haTDk1UFJsVEhsZDhIbmwvTzBLWCtsZ0N6eEZmVgpUdU9QZ3NOOWpvSkpLSVAvVGt3ZUpWYmx2UW4waEF5c3hIaFVPZ1VOWmhkcng5OTdRcXBSbXlJMmxtUWJlOE9DCi9NU2h6YTVKL3BBZVEwR0dlTkpaMUgyVTBkTGlySldMZkYzRXlZejJBVUJmNUdSbGR5c1VZQW14ZDM2Rmt6Mm4KeCtzRGhhbm82b1JjS2VoMWpkSVBTYW1WekZ6SDZ6UUxiUEVKM2YxRmluUmpIV1FydWlJVUZhT3N2U2lRc0xBdgoxQXRUbGlZR210UjN5L2dvSGM5YjRWb0s4aG9pQWRRYmVTQT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-09T18:05:42Z" lastUpdateTime: "2026-07-09T18:05:42Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sp2rs" reason: AutoApproved status: "True" type: Approved