--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T16:47:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T16:47:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T16:47:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T16:47:49Z" name: system:openshift:openshift-monitoring-xn4ng resourceVersion: "8102" uid: e28c68d1-19ce-4c3d-ad60-60d5a3a3923e spec: extra: authentication.kubernetes.io/credential-id: - JTI=35679c1b-b4c6-4507-b465-05b1b0d75b65 authentication.kubernetes.io/node-name: - ip-10-0-137-198.ec2.internal authentication.kubernetes.io/node-uid: - 5f2a492f-d628-44e1-b1c9-a876e8d22cb9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-jqgr7 authentication.kubernetes.io/pod-uid: - ce33d408-dd45-4e47-ace2-4d8eafcf1206 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 82dd599e-e6c7-47a3-bcd2-483663f8ba5c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T16:47:46Z" lastUpdateTime: "2026-07-07T16:47:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xn4ng" reason: AutoApproved status: "True" type: Approved