--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T20:41:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T20:41:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T20:41:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T20:41:05Z" name: system:openshift:openshift-monitoring-nclxm resourceVersion: "8196" uid: 0f160dd6-f3d4-48b7-bfe5-34d448bbc6ea spec: extra: authentication.kubernetes.io/credential-id: - JTI=72b89354-9f02-4258-855c-7f8b6f745519 authentication.kubernetes.io/node-name: - ip-10-0-130-177.ec2.internal authentication.kubernetes.io/node-uid: - 7b327577-1b88-4673-bb3a-408e6ee08577 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-plspl authentication.kubernetes.io/pod-uid: - 2bf8996a-81f7-490c-acc0-a201ff2a902e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUWxEVjR6NFQ1REJPMCs3YW1LdXRDRTV3ZENPdGNIckZ1VmpWZ0ltK0N4SUU0YWZRVmoKMitCREwxUHcwTWg2MCtDZmJKbmYvKzh4bldHS1c5MTZZOVBHb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBUGdXS0trWTE2MlorUERtR2RLeTYxQmdScmtRTEN3cVZQWEJYVDgrdkpNNUFpRUEzMjVRNElYdkprV3pJZ0loCjZSamhnR0I2SHAzWW1QMWJ2K3B5aHlOUEdXND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 944033ff-bce0-4b04-a5e4-fff885585820 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T20:41:05Z" lastUpdateTime: "2026-07-21T20:41:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nclxm" reason: AutoApproved status: "True" type: Approved