--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T19:34:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T19:34:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T19:34:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T19:34:49Z" name: system:openshift:openshift-monitoring-mgz6j resourceVersion: "8421" uid: 1e3a5dbc-953a-45eb-a21d-fb7c64aae703 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f7466bcb-d063-4555-a0c2-199d58640187 authentication.kubernetes.io/node-name: - ip-10-0-128-14.ec2.internal authentication.kubernetes.io/node-uid: - 2faf0005-1485-47c2-9200-077984751421 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-lrgdn authentication.kubernetes.io/pod-uid: - 2babca22-b684-4714-b7e2-30fe26e57bd3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9c999442-6bcf-46a6-b1c7-fd6b765c83c3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T19:34:49Z" lastUpdateTime: "2026-07-06T19:34:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mgz6j" reason: AutoApproved status: "True" type: Approved