--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T21:49:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T21:49:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T21:49:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T21:49:45Z" name: system:openshift:openshift-monitoring-hgkg8 resourceVersion: "8241" uid: 5025b009-eced-4ad7-92cd-eb155fd5439d spec: extra: authentication.kubernetes.io/credential-id: - JTI=cbeb5a2b-12e6-4028-83f1-9ee988787b14 authentication.kubernetes.io/node-name: - ip-10-0-138-36.ec2.internal authentication.kubernetes.io/node-uid: - 3e01583f-47f8-4b8d-b26e-870571c21206 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-9qff2 authentication.kubernetes.io/pod-uid: - 67567445-406c-4492-b0f3-1a484f765c4f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3e49d909-f8b5-4f6f-bd92-3250a953cb10 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T21:49:45Z" lastUpdateTime: "2026-07-21T21:49:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hgkg8" reason: AutoApproved status: "True" type: Approved