--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T17:15:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T17:15:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T17:15:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T17:15:46Z" name: system:openshift:openshift-monitoring-nx8zr resourceVersion: "8146" uid: f4614222-1dd4-4abb-b28e-2995f91452c7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d052f6b1-a659-4307-9ea6-349931380671 authentication.kubernetes.io/node-name: - ip-10-0-129-41.ec2.internal authentication.kubernetes.io/node-uid: - 4e6534ec-64cd-4449-a193-072d10bbcbd3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-s486x authentication.kubernetes.io/pod-uid: - 2fc0cae3-98d3-4eb4-b145-a8063ba6a06c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c8d1c091-b618-4848-bdd1-dc350c8324e6 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T17:15:46Z" lastUpdateTime: "2026-07-16T17:15:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nx8zr" reason: AutoApproved status: "True" type: Approved