--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T17:59:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T17:59:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T17:59:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T17:59:24Z" name: system:openshift:openshift-monitoring-km7fh resourceVersion: "8383" uid: 1bdaf337-6663-4469-8e08-011d44052942 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f1e11392-b27e-4158-a9e7-deff82b731f5 authentication.kubernetes.io/node-name: - ip-10-0-143-155.ec2.internal authentication.kubernetes.io/node-uid: - af6f924d-7b17-41a1-8f21-22ed52ff62e7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-8sw8s authentication.kubernetes.io/pod-uid: - 85e19581-0381-47c6-a18e-b91703cc902c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9a8411d1-e0df-49a3-ad2b-fcd1eed1d7fd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T17:59:24Z" lastUpdateTime: "2026-07-24T17:59:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-km7fh" reason: AutoApproved status: "True" type: Approved