--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T14:15:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T14:15:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T14:15:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T14:15:06Z" name: system:openshift:openshift-monitoring-28fl9 resourceVersion: "7697" uid: 52221c8f-bc1d-47bd-8746-22112437d7c6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=815d7a82-3728-4ed1-8236-b69637cb3caf authentication.kubernetes.io/node-name: - ip-10-0-141-45.ec2.internal authentication.kubernetes.io/node-uid: - 09ca8fd0-2353-4c83-9865-3c18766290fd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-24tn7 authentication.kubernetes.io/pod-uid: - a9284783-b78b-4612-96b7-38fb17d6e4b4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUm1EOUo5OVJacThFT2dMYkRQR1pQK0xxdGw3Q1Q1SjVVVHV3SEV1YXZzL2JzRi9leEoKS3JPK3hYNjJnL0wzWTBsTEZ2UHF2UE03eEQ2ZTlQakxPYU9zb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTU5vUVBoSklyUTlWd1FCYVVJa2JaSk8wRkMxMmdlYWNIczFBdGdvQUpNYUFpRUFvbGc4MUxrMHZIN1RNVGExCk1IMlFBczJMd1JXNjBkV2FyYkVZN3R1OWVLWT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: c9e1d293-7a34-4b45-8f9b-9a710b6816a9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T14:15:06Z" lastUpdateTime: "2026-07-09T14:15:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-28fl9" reason: AutoApproved status: "True" type: Approved