--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T13:44:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T13:44:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T13:44:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T13:44:24Z" name: system:openshift:openshift-monitoring-prrpz resourceVersion: "8477" uid: 2b23edbc-b1c8-4145-8a00-9e559a0dcb5b spec: extra: authentication.kubernetes.io/credential-id: - JTI=e200dea6-e0aa-4672-be0b-c7ca4aedb8bf authentication.kubernetes.io/node-name: - ip-10-0-131-116.ec2.internal authentication.kubernetes.io/node-uid: - fa3c66c8-0ba7-4b0f-893e-ff5240e7d652 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-j6d4s authentication.kubernetes.io/pod-uid: - dcc88e5c-0cde-4f78-9d31-34c61b544946 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7a6b16fd-7a31-40f9-b69b-761d70802fcb usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T13:44:24Z" lastUpdateTime: "2026-07-28T13:44:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-prrpz" reason: AutoApproved status: "True" type: Approved