--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T13:37:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T13:37:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T13:37:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T13:37:04Z" name: system:openshift:openshift-monitoring-fz7rx resourceVersion: "9574" uid: 3ba1afe1-6e99-4939-a496-a7a3a7f27297 spec: extra: authentication.kubernetes.io/credential-id: - JTI=1d45195d-5fa7-4116-a477-ecf750756719 authentication.kubernetes.io/node-name: - ip-10-0-131-48.ec2.internal authentication.kubernetes.io/node-uid: - af379ef5-3bb7-49e6-b403-551b39ef86b4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-g5jx2 authentication.kubernetes.io/pod-uid: - 2a66a11c-63e7-477b-a84d-3cf0102368a1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c5583820-b47c-45a9-9f95-9b0eb57799e2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T13:37:04Z" lastUpdateTime: "2026-06-14T13:37:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fz7rx" reason: AutoApproved status: "True" type: Approved