--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T20:18:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T20:18:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T20:18:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T20:18:09Z" name: system:openshift:openshift-monitoring-tp6rd resourceVersion: "8115" uid: 3a57d5d9-3c91-46b3-bc76-3f7d65ba411d spec: extra: authentication.kubernetes.io/credential-id: - JTI=3eabd7fd-a915-4fd3-a1e8-e27677833586 authentication.kubernetes.io/node-name: - ip-10-0-131-212.ec2.internal authentication.kubernetes.io/node-uid: - 753d4d2f-54ec-4fda-99d8-300a9d754561 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-v4wpw authentication.kubernetes.io/pod-uid: - 3a32c9ba-89fb-429d-93c0-26606df643b2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4b0ecab2-735f-43c8-bded-554f6ee17fb3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T20:18:09Z" lastUpdateTime: "2026-07-01T20:18:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tp6rd" reason: AutoApproved status: "True" type: Approved