--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T16:21:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T16:21:31Z" name: system:openshift:openshift-monitoring-dm9gb resourceVersion: "7965" uid: 7b5f3672-4131-4e69-86e3-9b56136bec08 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c98d0d98-d37d-4f96-92e9-7ccba15462be authentication.kubernetes.io/node-name: - ip-10-0-141-249.ec2.internal authentication.kubernetes.io/node-uid: - 17f32519-05d6-46bc-914a-6bd1d83e611d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-45hlv authentication.kubernetes.io/pod-uid: - ac52feb7-5571-46df-9d9c-4da8a7fd2a4d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4f7ac1cd-8464-4427-9fc8-57b3d7735c02 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T16:21:30Z" lastUpdateTime: "2026-07-28T16:21:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-dm9gb" reason: AutoApproved status: "True" type: Approved