--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T15:52:11Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T15:52:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T15:52:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T15:52:11Z" name: system:openshift:openshift-monitoring-fcs9j resourceVersion: "8605" uid: a778cb4e-5a5e-424b-bb55-986a8b8123c7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5d633229-2da3-4350-87cc-c250b88a2dae authentication.kubernetes.io/node-name: - ip-10-0-136-198.ec2.internal authentication.kubernetes.io/node-uid: - 9133e2c7-299f-4b4c-9057-54a9fba59bd8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-lf9rm authentication.kubernetes.io/pod-uid: - 82e36f17-b33c-406c-9648-b0078e7c4184 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ea5e205e-af3a-45bc-8154-0ae62d5726f3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T15:52:11Z" lastUpdateTime: "2026-07-08T15:52:11Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fcs9j" reason: AutoApproved status: "True" type: Approved