--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T16:02:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-08-04T16:02:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-08-04T16:02:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T16:03:41Z" name: system:openshift:openshift-monitoring-9lhwr resourceVersion: "8349" uid: 85693408-1184-4883-9274-279d546d2a45 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2abd3a93-1bb9-4b03-90d5-d4ad18df5fed authentication.kubernetes.io/node-name: - ip-10-0-132-42.ec2.internal authentication.kubernetes.io/node-uid: - e392e1c7-cc7a-4b50-8c1a-cd1a9a1ba4a6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-rz5dr authentication.kubernetes.io/pod-uid: - 84092957-5deb-4cae-b1ba-310f24137f8e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: fed887d5-e291-4ed8-a0e7-160c85c22118 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T16:02:50Z" lastUpdateTime: "2026-08-04T16:02:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9lhwr" reason: AutoApproved status: "True" type: Approved