--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:33:52Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-14T14:33:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-14T14:33:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:34:00Z" name: system:openshift:openshift-monitoring-m6w6j resourceVersion: "8985" uid: f37d0ff3-af16-472d-af5a-c4d51c6653f4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d621dba1-eff0-482c-a63d-4a78334a8c07 authentication.kubernetes.io/node-name: - ip-10-0-129-32.ec2.internal authentication.kubernetes.io/node-uid: - c69488c7-f575-4366-945e-5a501c29b416 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-wlcdg authentication.kubernetes.io/pod-uid: - 0d9264cb-c8aa-4184-8207-7f766bd7979e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 506d50a8-7ea3-4bf6-a91f-0e52d5eb141f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:33:52Z" lastUpdateTime: "2026-07-14T14:33:52Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-m6w6j" reason: AutoApproved status: "True" type: Approved