--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T22:29:01Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T22:29:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T22:29:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T22:29:01Z" name: system:openshift:openshift-monitoring-ft9xv resourceVersion: "8503" uid: 0ee8f3a1-e3a6-470a-a2cb-038e72d56890 spec: extra: authentication.kubernetes.io/credential-id: - JTI=04fc784b-a503-46e7-a195-7bf659ff70b8 authentication.kubernetes.io/node-name: - ip-10-0-130-206.ec2.internal authentication.kubernetes.io/node-uid: - 9ad4786e-b1a6-4e42-97f9-d3d6290bed50 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-l6m4n authentication.kubernetes.io/pod-uid: - aac8760b-aa20-42ec-8f8b-845b473399b3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b72e23c8-bb2c-4b0a-a166-0aaa3b67deea usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T22:29:01Z" lastUpdateTime: "2026-07-09T22:29:01Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ft9xv" reason: AutoApproved status: "True" type: Approved