--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T19:00:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T19:00:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T19:00:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T19:00:15Z" name: system:openshift:openshift-monitoring-zxcqc resourceVersion: "8059" uid: ce063257-4783-432a-b0de-48828b5c5949 spec: extra: authentication.kubernetes.io/credential-id: - JTI=130533ca-b663-47bf-b352-67c85a4b8293 authentication.kubernetes.io/node-name: - ip-10-0-131-216.ec2.internal authentication.kubernetes.io/node-uid: - ec680ce9-cb5a-45dc-8f9f-c7d5c353743d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-xdrdc authentication.kubernetes.io/pod-uid: - 01fd2562-0242-447d-b53e-7321a7e6142d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7bd14377-2267-421e-b0fe-c3ccab496dd5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T19:00:13Z" lastUpdateTime: "2026-07-10T19:00:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zxcqc" reason: AutoApproved status: "True" type: Approved