--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T18:37:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-17T18:37:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T18:37:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-17T18:37:54Z" name: system:openshift:openshift-monitoring-5n9nm resourceVersion: "9687" uid: b9639fa1-3bf4-4510-b9e9-749b41f822c5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2f7eb663-9dd3-4a44-9e48-20805b460957 authentication.kubernetes.io/node-name: - ip-10-0-138-51.ec2.internal authentication.kubernetes.io/node-uid: - 06690973-5811-445c-8c43-11e3080ab621 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-xhz5l authentication.kubernetes.io/pod-uid: - 39a38b78-ab33-411b-9a10-4cd932d6c535 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJIZC93b0hjR25JN2FlcWRsVHlONjdjVGZaSG9Idm9xaTQxbk40RU9jVkU2N0twZ0JEY1MKYXk4VGVRQUthSlNWUGZGM3p4bndDc2h6QlJCUzZHSENwQ2lnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQpwS2hnaUh6Y0RNakcwT2M3cGI0eDJEbXN2bGZORjA1ODBQcXFUWlhoU3dZQ0lCOXE1N0RLdmlIMld2M3pjdkc4CmloL25rRHR5aHN6UGlwekxPeEVDTmtmMwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: ca3cf211-f3c6-4b21-b2c3-5f46ba7c8d7a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T18:37:54Z" lastUpdateTime: "2026-07-17T18:37:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5n9nm" reason: AutoApproved status: "True" type: Approved