--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T18:15:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T18:15:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T18:15:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T18:15:34Z" name: system:openshift:openshift-monitoring-p9q97 resourceVersion: "8256" uid: 84a41efc-ad71-4d6f-9032-e331a1b9b882 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f09a7bd5-b013-4ed0-aa0b-78c1fe42eb04 authentication.kubernetes.io/node-name: - ip-10-0-131-219.ec2.internal authentication.kubernetes.io/node-uid: - f883841e-1e72-4cc2-9522-58060fda5539 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-jdfrc authentication.kubernetes.io/pod-uid: - 865b32b4-410c-4129-93ae-3c2d7b7370f2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: adc3cec8-da00-45bd-9681-041d9caa7280 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T18:15:23Z" lastUpdateTime: "2026-07-24T18:15:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-p9q97" reason: AutoApproved status: "True" type: Approved