--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T16:50:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T16:50:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T16:50:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T16:50:40Z" name: system:openshift:openshift-monitoring-ggkhf resourceVersion: "8402" uid: d47d451d-ba97-4d89-bc00-ff1728fb3e27 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7a48addb-bb24-41ff-b1d6-44941a55af5c authentication.kubernetes.io/node-name: - ip-10-0-136-43.ec2.internal authentication.kubernetes.io/node-uid: - 3d4bf618-48b2-445f-aaef-48a3b97a9d28 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-fwhrv authentication.kubernetes.io/pod-uid: - 33436342-8cdb-4220-b84a-77907ba03926 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9eecde29-a0b4-44d3-a2ce-8009bcc30c42 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T16:50:40Z" lastUpdateTime: "2026-07-31T16:50:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ggkhf" reason: AutoApproved status: "True" type: Approved