--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T11:19:16Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T11:19:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T11:19:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T11:19:16Z" name: system:openshift:openshift-monitoring-krgts resourceVersion: "8310" uid: 48057626-2322-4435-946f-9712adc85ad9 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9475d417-0b61-4f4f-b276-38805b84a63b authentication.kubernetes.io/node-name: - ip-10-0-135-81.ec2.internal authentication.kubernetes.io/node-uid: - 2369b9b0-38ec-432a-9f7d-b38c06da574b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-6mrs8 authentication.kubernetes.io/pod-uid: - ba013853-d529-46b6-84d3-0e259d87af73 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBU1UrajVxc09Ialdub1FkVHZWUGQxaEZEaEJUTmVPa2tBc1YveFJheFptSW80cDI1UEsKQ01FMmNVSmZtK1MvS1VRSkcrb25XVmtiRTBMZnl1Y3V3SWs5b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBUCtBOXgzR1V3QUlrMEFSNGtsejFKQytYN0h3SEdtNy8ySC9vN0E1dzFHb0FpRUEraHZYalNkc1BQUXZLMTBjCjZkSm1LNWJGZnhmM29GVnhDbGZDcGR1bVBOTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 715a7ce3-24bf-4151-8176-2f203e2fbb27 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUxIaElVRHZPMjBKeitGSnJoWDJMK0l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTNNVEV4TkRFMldoY05Namd3TkRFMk1URXhOREUyV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjEKY3kxck9ITXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1UrajVxc09Ialdub1FkVHZWUGQxaApGRGhCVE5lT2trQXNWL3hSYXhabUlvNHAyNVBLQ01FMmNVSmZtK1MvS1VRSkcrb25XVmtiRTBMZnl1Y3V3SWs5Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFMUXNFOEVHSG4yY3Vha0c3VWdhUHVtYUNrWUhCYXNQVHVFKwp2SW9oL2R6Q0xmdVh1UU5WWW9mMEVreXp6RHBYYVYwd0lxSTQzUnZVSDhtcXdPSTNtUHN3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFFWTVHWGRnZWh1ZGR1TC9HUkxIT0RQbERrY3M1dStUZWlKQ0dWTE9vMUIyT2tIN1N5cGUKblBPUFVnNW92SG96OERveHJqSzg2TEFzenltOVI3MU1iQWs3d0hEeTYxNlVadmJNaUIrRU5JT3FBU2dtL1l3Zwp2UkJZdnFaa0VJZzU5SmNwNitoUVJvRlR4WWVDTDZWem53bVhTNEFMQ0tMcXVBejVQdjc4U2VPcHZzSUFteW5YCkduMDZUZFBvaitmSG5RZVRwOTJWRStVeWtHRDNVSHVhRHhjZGx2RVk1T0lpR1hDUmxmcmRXSHJlVDZuNmZ2N1gKWCtZeHlwUlc5WkxoWG41ZktwaXE1U2RqSW5rYXN4NlM2WUFjQlpvNFFreC8xWGZhWkwzK2ZUT1FTL2NQOVZkbgpwYlFyc09iUHAyVmVCcjl5clcwQkNHbGJEN1M5VDRvdHZVZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-17T11:19:16Z" lastUpdateTime: "2026-04-17T11:19:16Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-krgts" reason: AutoApproved status: "True" type: Approved