--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T04:04:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T04:04:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T04:04:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T04:04:47Z" name: system:openshift:openshift-monitoring-56kk2 resourceVersion: "8682" uid: 0d90a44f-bc5a-4592-83b9-280cff193d66 spec: extra: authentication.kubernetes.io/credential-id: - JTI=62f16033-279b-4e65-a1d1-ae1bd6e73c8d authentication.kubernetes.io/node-name: - ip-10-0-129-12.ec2.internal authentication.kubernetes.io/node-uid: - d5b828ae-f34b-49f1-bab3-a63663cdc7d4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-xx4sg authentication.kubernetes.io/pod-uid: - 896876a8-2a55-4822-bab3-2dfbad6e5d99 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 43a715bc-5a8e-438f-9de5-5147cb114784 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T04:04:47Z" lastUpdateTime: "2026-07-29T04:04:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-56kk2" reason: AutoApproved status: "True" type: Approved