--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T12:40:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T12:40:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T12:40:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T12:40:33Z" name: system:openshift:openshift-monitoring-blm5w resourceVersion: "8369" uid: c9eab0dc-13f1-4872-b36d-62dfe004afb2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=06d7e099-762c-4eca-8058-e52678e8c4c7 authentication.kubernetes.io/node-name: - ip-10-0-143-149.ec2.internal authentication.kubernetes.io/node-uid: - 28aec841-b683-4aa5-8977-a155a0c74422 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-m76wm authentication.kubernetes.io/pod-uid: - 33aa4b59-fdea-4a0e-8b70-76b57da84a95 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d0f32ba2-d703-4efb-8083-b218f07de88e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T12:40:33Z" lastUpdateTime: "2026-07-02T12:40:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-blm5w" reason: AutoApproved status: "True" type: Approved