--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:34:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T12:34:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T12:34:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:34:44Z" name: system:openshift:openshift-monitoring-g8248 resourceVersion: "7841" uid: 8bbd58ff-0057-4a78-bae4-46e9cb1f64b7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=49990346-867c-4905-a7dc-a3e8d9b7fccc authentication.kubernetes.io/node-name: - ip-10-0-132-15.ec2.internal authentication.kubernetes.io/node-uid: - cc566637-5490-434b-ad2c-c969fd7bbd2d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-ktczk authentication.kubernetes.io/pod-uid: - 9bf97a80-2f98-4a71-8407-395871a760c7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 876dfca9-b559-46ff-aace-3e2206c83844 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T12:34:38Z" lastUpdateTime: "2026-07-28T12:34:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-g8248" reason: AutoApproved status: "True" type: Approved