--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T19:40:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T19:40:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T19:40:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T19:40:30Z" name: system:openshift:openshift-monitoring-sbgsf resourceVersion: "8256" uid: 0c008027-2a3d-4a4c-bb39-f430235b7ab1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8cc83d4e-e7ca-497f-87ba-973748d7c708 authentication.kubernetes.io/node-name: - ip-10-0-135-254.ec2.internal authentication.kubernetes.io/node-uid: - f06ca528-8e8b-499a-be1b-5a7a8e095a71 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-hgm8k authentication.kubernetes.io/pod-uid: - ddfb3012-64c9-4a83-9a6f-c39b9e768cc4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 21239e42-a683-42e0-b64e-be2c63bd89b2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQzZFWGtCNjlTcjE5TmFqdnhVV3NiakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016QXhPVE0xTXpCYUZ3MHlPREEzTWpreE9UTTFNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnoKTFdzNGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJNL0p4TXJ1a29TaEFhUkg1UjNzSDg3dworVnZheGJ1QllSMEZOaHErMUNNRlY2c1JaY1RMcmp2T3RqR2t1T21NMTk0K01hc0xkc3ZYbUhEMWkxL2pYc2lqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWFlQldlTkdSdEdPcW41MDNVYVhpb0VaTWYyRFBHZnBsNEc5bgo1Mzdub2NrQ2wyUGpQYXNVTU9wZVVZb2F5NGcvbzBnK2ErUERpbXJvZGRhZFBnT25uVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXhuei9vdmtiYlJQbUNnOGVFdG9KWUlTNFFGM1orWkpCbFFLcUt0SHMrMHNWa2ZEVllQNXEKb3J2RmF4SUdQN01DK2RJYWFvTWFDRVFvVS8vNWg1Q25LbXJ1ajdpSkJVNklSemVmZHV2TTE0cTdaTVVmdXI3QgpRYlBBRjlzSUNxWmNnR1BDcVY5dkZMYjhDbU5oRU1WQUFrL3F3UkxkSDZNUkEwekdCd0dsNzlwYjZKRHdvSnE3ClZuRk9iT3hmUHBNdy83dTdDWGY0MUdMcHlQWFVTS2taQm54S0lWNDNFVmJlVEY1T29LMzFSbHVxdjIyMkNaMjIKYWxNalhYbkI0VVZ6UUNWSTlHbEpLMXMxd0pMaGgxTTVTdU5HWFhFVlJYbEtLV3FhbVJJVjdZK2JUSnpFRVMzQwpsQTZFemRrMm1va2lZdmRFZFQrWkZXMWc2RGo1bTYvSEJRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-30T19:40:30Z" lastUpdateTime: "2026-07-30T19:40:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sbgsf" reason: AutoApproved status: "True" type: Approved