--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T19:15:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T19:15:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T19:15:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T19:15:54Z" name: system:openshift:openshift-monitoring-xzjp6 resourceVersion: "8234" uid: 078f3db3-60be-4b1a-a9c6-c79c84f59404 spec: extra: authentication.kubernetes.io/credential-id: - JTI=068500e2-3174-47e1-b257-7f7b0525012e authentication.kubernetes.io/node-name: - ip-10-0-132-216.ec2.internal authentication.kubernetes.io/node-uid: - 5abd7d49-0a16-42d7-9e1e-eb343b43f9b5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-x8zvf authentication.kubernetes.io/pod-uid: - e6b38a35-f491-4e16-ad59-3c8847af8951 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4b0edb4c-ef98-4a43-8046-3099048f5c06 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T19:15:54Z" lastUpdateTime: "2026-07-29T19:15:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xzjp6" reason: AutoApproved status: "True" type: Approved