--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T14:33:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T14:33:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T14:33:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T14:33:33Z" name: system:openshift:openshift-monitoring-l89cg resourceVersion: "8375" uid: c6c0b498-5bd9-4de9-9658-7d74ab11cf73 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4e237e68-dd35-41d6-b1e6-b5f5b1f971a1 authentication.kubernetes.io/node-name: - ip-10-0-140-220.ec2.internal authentication.kubernetes.io/node-uid: - 148414f3-a100-40ca-a636-0f03b23a8f01 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-5ksp8 authentication.kubernetes.io/pod-uid: - ae68db00-049e-481a-9113-1e3db992ddec groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJHTUVkUUx3aXBwT3BDUXErU3Y1VVVBbkpIZmlBMDdIdTlLOENUWTNLTFhCeHBzUUwrOWsKTm9NTmNVQnZFaXRtdGUySi9RdHVPNENadFQ3K1kyRERSUmFnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBUgp1TG5iQ2d6UERFaEtaQ2NuQWZ2T3l6bmw0NjB5b0dHaTl2OVgxd3RKc0FJZ1YwS3lMLzdVaklkZnVNR1laeFBxCm1XeXpQcWIySkxhSjlOM1doWnR0T2swPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 2e94d7d0-d5c9-47bf-8f3d-c7e1601c67b4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T14:33:33Z" lastUpdateTime: "2026-07-09T14:33:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-l89cg" reason: AutoApproved status: "True" type: Approved