--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T16:21:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T16:21:31Z" name: system:openshift:openshift-monitoring-ts9wp resourceVersion: "7966" uid: f4ca8cc1-a5c0-4344-b50d-9ce5836baef8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c98d0d98-d37d-4f96-92e9-7ccba15462be authentication.kubernetes.io/node-name: - ip-10-0-141-249.ec2.internal authentication.kubernetes.io/node-uid: - 17f32519-05d6-46bc-914a-6bd1d83e611d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-45hlv authentication.kubernetes.io/pod-uid: - ac52feb7-5571-46df-9d9c-4da8a7fd2a4d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4f7ac1cd-8464-4427-9fc8-57b3d7735c02 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T16:21:30Z" lastUpdateTime: "2026-07-28T16:21:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ts9wp" reason: AutoApproved status: "True" type: Approved