--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T13:18:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T13:18:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T13:18:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T13:18:55Z" name: system:openshift:openshift-monitoring-pwwhm resourceVersion: "9155" uid: 4cf0332f-dac0-4438-9fef-73348d78f08f spec: extra: authentication.kubernetes.io/credential-id: - JTI=986d833d-5dfe-476e-bf2d-b22a5f752116 authentication.kubernetes.io/node-name: - ip-10-0-131-238.ec2.internal authentication.kubernetes.io/node-uid: - 80dec9f9-34fd-4345-a1a9-9506920e201b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-z4gzj authentication.kubernetes.io/pod-uid: - ed6ac0b5-82f0-4681-ab35-abe5a4a50d80 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bab5bae4-505f-41b0-9641-bc5f9cf4e485 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T13:18:45Z" lastUpdateTime: "2026-07-02T13:18:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pwwhm" reason: AutoApproved status: "True" type: Approved