--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:55:22Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-14T14:55:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:55:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-14T14:55:22Z" name: system:openshift:openshift-monitoring-kmfdm resourceVersion: "8482" uid: c440e86d-9eb5-4ad4-875e-5385edc2cf4d spec: extra: authentication.kubernetes.io/credential-id: - JTI=cbb6c711-0834-41a8-ad92-780c8a153211 authentication.kubernetes.io/node-name: - ip-10-0-138-245.ec2.internal authentication.kubernetes.io/node-uid: - 95f33ebd-6751-49de-a156-dc0671df6cf1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-9gbds authentication.kubernetes.io/pod-uid: - b8006df9-058d-4c66-83fb-43f40dc3a9e9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bcd1b0a0-dbb6-4d04-8d1d-5acf67ed6c18 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:55:22Z" lastUpdateTime: "2026-07-14T14:55:22Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kmfdm" reason: AutoApproved status: "True" type: Approved