--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T14:18:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T14:18:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T14:18:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T14:18:15Z" name: system:openshift:openshift-monitoring-5z5h9 resourceVersion: "8496" uid: b280a9f9-45fe-4b34-b264-d0cdc3ec3216 spec: extra: authentication.kubernetes.io/credential-id: - JTI=ed98b24a-fe2e-4ac1-b5cd-1a3c52982817 authentication.kubernetes.io/node-name: - ip-10-0-133-223.ec2.internal authentication.kubernetes.io/node-uid: - bfb02dd5-4fa7-4f41-bed1-984d1e6d1421 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-fwmw7 authentication.kubernetes.io/pod-uid: - 028ffee0-b008-47b4-93b0-996dfbd4f7b1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 66e5e76c-ebd2-4905-b12e-5ca59603c0cd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T14:18:15Z" lastUpdateTime: "2026-07-27T14:18:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5z5h9" reason: AutoApproved status: "True" type: Approved