--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T14:07:00Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-21T14:07:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T14:07:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-21T14:07:00Z" name: system:openshift:openshift-monitoring-4p7ks resourceVersion: "8417" uid: 799bd754-79a2-4efe-908a-d2dc5cd47f7e spec: extra: authentication.kubernetes.io/credential-id: - JTI=ca0eb8a2-80e6-43ef-bbc3-99c11be5396c authentication.kubernetes.io/node-name: - ip-10-0-143-189.ec2.internal authentication.kubernetes.io/node-uid: - 6addb081-65f2-4185-b518-a417241bb7ea authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-dvmz7 authentication.kubernetes.io/pod-uid: - d44a8e7b-179e-4bda-b78b-b2c6ca7039f1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9e071676-4785-4647-b22a-4f005ea44e62 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T14:07:00Z" lastUpdateTime: "2026-05-21T14:07:00Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4p7ks" reason: AutoApproved status: "True" type: Approved