--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T16:55:03Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T16:55:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T16:55:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T16:55:03Z" name: system:openshift:openshift-monitoring-lf6c9 resourceVersion: "8405" uid: 06d0da44-7357-4d8b-a112-737e6cad8a51 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3d6cd083-ea0a-4646-bf54-5b4467a8fd1d authentication.kubernetes.io/node-name: - ip-10-0-130-189.ec2.internal authentication.kubernetes.io/node-uid: - 68ef4d86-2653-410a-8f3a-951893c9882a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-mzrxm authentication.kubernetes.io/pod-uid: - 2d237265-d3f0-48a4-beba-d24270d605ad groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d4c8075b-f30a-4d7e-a32c-128d46aa0d64 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T16:55:03Z" lastUpdateTime: "2026-07-06T16:55:03Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lf6c9" reason: AutoApproved status: "True" type: Approved