--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T19:02:00Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T19:02:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T19:02:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T19:02:00Z" name: system:openshift:openshift-monitoring-gxgmc resourceVersion: "8145" uid: 0073e9a7-e46e-4588-a0ce-cec4cc246c03 spec: extra: authentication.kubernetes.io/credential-id: - JTI=183b86ef-ceff-487f-afb6-a599a696d605 authentication.kubernetes.io/node-name: - ip-10-0-142-134.ec2.internal authentication.kubernetes.io/node-uid: - 20ae8ee1-1208-47bd-ad0b-4cf2f6d6e301 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-pnvkh authentication.kubernetes.io/pod-uid: - ecead548-45c5-4195-95e8-a5c058d5958b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ad8e939e-995b-4873-9b0a-5c95a141f911 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T19:02:00Z" lastUpdateTime: "2026-07-07T19:02:00Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gxgmc" reason: AutoApproved status: "True" type: Approved