--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:04:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T18:04:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T18:04:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:05:04Z" name: system:openshift:openshift-monitoring-z97dm resourceVersion: "7610" uid: 8928fa23-f0d4-45c8-91fc-943ac9528d49 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2f1ad9de-8ac8-43a8-a29f-f3b29e599da5 authentication.kubernetes.io/node-name: - ip-10-0-141-141.ec2.internal authentication.kubernetes.io/node-uid: - 4617c04a-5e70-489b-90c3-ef6ab2f1f0bb authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-k4lfz authentication.kubernetes.io/pod-uid: - c497a494-0225-4f49-9538-88705846c908 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cfd52cec-ea34-417c-ba05-eaa39a67d720 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:04:56Z" lastUpdateTime: "2026-07-09T18:04:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-z97dm" reason: AutoApproved status: "True" type: Approved