--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T00:20:07Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T00:20:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T00:20:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T00:20:07Z" name: system:openshift:openshift-monitoring-6gxq2 resourceVersion: "9340" uid: 2511a941-c562-4194-b94b-8a9c4cc23e88 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a05f4661-b3b9-44e9-8114-3ee0b1079387 authentication.kubernetes.io/node-name: - ip-10-0-128-116.ec2.internal authentication.kubernetes.io/node-uid: - ecdaebe3-ad93-48c8-930a-f178792fdf94 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-blndf authentication.kubernetes.io/pod-uid: - a2e6f08b-f22e-4ee7-b25d-d84eb08fb4f7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVHlRUWRWaW5OTnB3RytVK096VzJCVmt4UHVUV25Cais1SUd0ZW9ZNzhJZzgxMFFFKzcKdE5CQWY3bzRKTnVIYUlDSEs0NWpRejhsUVFhbHZEUTJYZStob0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSU9HbXFndXRUZ1IwWXpTUmhXRHhBR21JVDlLbG96RkdhbERWRnF4SXpqRUFpRUF1RnZiOXNyaER6QjFrQ3doCkh6WVhSV1VFZkJ3aXJpQzRBbVhhSUp3TDJkTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 1df069bd-230b-4b25-acaf-10e3b20886f1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T00:20:07Z" lastUpdateTime: "2026-07-10T00:20:07Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6gxq2" reason: AutoApproved status: "True" type: Approved