--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T17:07:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T17:07:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T17:07:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T17:07:49Z" name: system:openshift:openshift-monitoring-cpn8h resourceVersion: "9423" uid: 8a582063-39fa-49d9-9007-c5ca8b07859f spec: extra: authentication.kubernetes.io/credential-id: - JTI=8817a022-6596-4bfa-9458-73743246c386 authentication.kubernetes.io/node-name: - ip-10-0-139-244.ec2.internal authentication.kubernetes.io/node-uid: - d5362dd1-8155-4757-ad03-c8c26a8999ff authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-r5wvh authentication.kubernetes.io/pod-uid: - a53f4531-7c23-4e5a-8dfd-688c73b21926 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ce3546d9-4d23-41df-8a3e-4f193c5f45df usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T17:07:49Z" lastUpdateTime: "2026-07-24T17:07:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cpn8h" reason: AutoApproved status: "True" type: Approved