--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T21:16:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T21:16:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T21:16:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T21:16:21Z" name: system:openshift:openshift-monitoring-r8pnn resourceVersion: "8537" uid: b90d853c-0146-4339-b143-d2165a142fe4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8232335c-76ad-4e5b-9900-4b011f492d3c authentication.kubernetes.io/node-name: - ip-10-0-140-162.ec2.internal authentication.kubernetes.io/node-uid: - 73af8e03-858b-4062-8da8-2337fb339326 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-5rdtx authentication.kubernetes.io/pod-uid: - 689dd5e0-863e-4f54-af4b-3c268bfe6351 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f960cb26-cf41-4fcf-99c0-b8588c1eb689 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T21:16:21Z" lastUpdateTime: "2026-07-24T21:16:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-r8pnn" reason: AutoApproved status: "True" type: Approved