--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T08:01:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T08:01:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T08:01:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T08:01:30Z" name: system:openshift:openshift-monitoring-qg2nk resourceVersion: "8293" uid: f80c04ca-97c2-4e1c-8c9c-36fe395acfd4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=bd4c21d0-9dc6-4d40-bc24-d7045fbf90ad authentication.kubernetes.io/node-name: - ip-10-0-135-15.ec2.internal authentication.kubernetes.io/node-uid: - 5b0cba7e-a43d-45ae-85e3-81402ad58ca1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-hx2h2 authentication.kubernetes.io/pod-uid: - 83729f8c-e75b-4c7d-a1c8-dd7ee8ff81f6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJGT2I4cEppUXYxbGovNitRVmo3OGtVNSswSnZDYUF3Z1RoOGpjNVI0T1dJSjN3VXFlRE8KSzRXWDgxTlExT0RSTVpyTVVYc1NEZVpFS1pIWVVoM3NnYXFnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBNApPYzZONzJhdzUyb2tRbGwyT0NLTlNQNlA1RUNNazRvU3p6NVlNcFJtQXdJZ1JVb2J4OFpiU3kvQkZJeHIzNkswCk9uQkoyNzhGRVU1RXJQUW9ockxYUnQ0PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 3fb74e2d-370e-4be5-b32f-4547515d1a90 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T08:01:30Z" lastUpdateTime: "2026-07-13T08:01:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qg2nk" reason: AutoApproved status: "True" type: Approved