--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T16:53:32Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T16:53:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T16:53:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T16:53:32Z" name: system:openshift:openshift-monitoring-x8gxd resourceVersion: "8500" uid: 97959af9-0d67-46bd-85d8-ede9cdc9071c spec: extra: authentication.kubernetes.io/credential-id: - JTI=e3e7beed-8170-4b0c-80b4-a3e419aae772 authentication.kubernetes.io/node-name: - ip-10-0-132-198.ec2.internal authentication.kubernetes.io/node-uid: - e6a10617-e6b7-4870-ba06-06482bc4bc68 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-rkbt2 authentication.kubernetes.io/pod-uid: - 84bae750-fc41-4aec-99a4-fc7880f2a3c2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: baf69b00-e0ad-4588-88a0-6f5d55704049 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T16:53:32Z" lastUpdateTime: "2026-07-23T16:53:32Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-x8gxd" reason: AutoApproved status: "True" type: Approved