--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T02:22:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T02:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T02:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T02:22:40Z" name: system:openshift:openshift-monitoring-xn6l8 resourceVersion: "9428" uid: 921f9cb6-e1ba-4d98-b03b-b4052255dc0a spec: extra: authentication.kubernetes.io/credential-id: - JTI=49d61c70-cc95-44c1-9db0-01c18cf98a01 authentication.kubernetes.io/node-name: - ip-10-0-141-229.ec2.internal authentication.kubernetes.io/node-uid: - 2ac25a9c-41f1-4ef4-8a5d-312f613aa71b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-t678z authentication.kubernetes.io/pod-uid: - a15d589e-a296-4ba9-83d9-2a8a74f8823e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 35d6d956-3dd1-4419-9c51-8146b2227303 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T02:22:40Z" lastUpdateTime: "2026-07-07T02:22:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xn6l8" reason: AutoApproved status: "True" type: Approved