--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T01:39:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T01:39:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T01:39:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T01:39:17Z" name: system:openshift:openshift-monitoring-h7k6d resourceVersion: "8292" uid: c571455a-ab36-482d-8a84-d304fe26317a spec: extra: authentication.kubernetes.io/credential-id: - JTI=a27a9370-e07d-4f02-9774-932ccf4ccaa4 authentication.kubernetes.io/node-name: - ip-10-0-143-251.ec2.internal authentication.kubernetes.io/node-uid: - beb0e1b8-0d3d-409a-8130-519d4a6af46b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-4jflm authentication.kubernetes.io/pod-uid: - cb40890b-7746-4685-8b25-909aaa036223 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJCZDNXWWNlSjBYdkU1VnRza3p3TXJ1T3lJajZyLzFDdzJGNStoTzZLUTV6WWk0cGJGV08Kb0EvUnVEV0svdHFTbm9nZ1hRcDlGSmdqUWVvNFRzL0tNaEtnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBQgpQbzNlaUVzZWlUZEtlZy9PU240aVQwVE9LbDhISWJGb2FXNUhVMW43UkFJZ0w3bHlkZ2w1Vi9Gc3JnWlRzaVJvCmJ5VmJOZ2FodXEzaFJ4RVdnK1VVOGJzPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 30890198-df12-4ab5-8c6c-6c5436cdc9ad usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T01:39:17Z" lastUpdateTime: "2026-07-08T01:39:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-h7k6d" reason: AutoApproved status: "True" type: Approved