--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:41:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T17:41:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:41:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T17:41:44Z" name: system:openshift:openshift-monitoring-5xh6d resourceVersion: "8047" uid: c406dbc6-a721-430c-abd6-a04bfa219442 spec: extra: authentication.kubernetes.io/credential-id: - JTI=51ab3ab4-c39a-4be1-914b-657dbde32361 authentication.kubernetes.io/node-name: - ip-10-0-129-170.ec2.internal authentication.kubernetes.io/node-uid: - 88abba99-a9bd-448d-8767-fe6a9a654f5a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-jzjvx authentication.kubernetes.io/pod-uid: - 2d8f2aa1-a7fe-4b51-8e61-5eb356bd27e4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a9a19f53-27a7-4e02-b292-7c51018cdaee usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:41:44Z" lastUpdateTime: "2026-07-07T17:41:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5xh6d" reason: AutoApproved status: "True" type: Approved