--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T17:01:42Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T17:01:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T17:01:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T17:01:42Z" name: system:openshift:openshift-monitoring-2pw6z resourceVersion: "8177" uid: 65c1cae5-63c9-4e34-b872-3b8d9460084f spec: extra: authentication.kubernetes.io/credential-id: - JTI=4a3c7e5c-9850-462b-b4d5-bc28d25ada94 authentication.kubernetes.io/node-name: - ip-10-0-137-57.ec2.internal authentication.kubernetes.io/node-uid: - 01d64e65-0ef6-4c9b-b4c6-96d2aab7ec6a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-s5c9f authentication.kubernetes.io/pod-uid: - 0399577e-b99f-4403-a296-04f3e4609d34 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9e84b7f1-b1f5-4508-8549-5b464ffc8c29 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T17:01:42Z" lastUpdateTime: "2026-07-30T17:01:42Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2pw6z" reason: AutoApproved status: "True" type: Approved