--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T19:01:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T19:01:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T19:01:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T19:01:53Z" name: system:openshift:openshift-monitoring-gdz2z resourceVersion: "7780" uid: 0d885227-71d1-4e44-8f85-8ed06a1d4e6e spec: extra: authentication.kubernetes.io/credential-id: - JTI=d0de793d-876d-4467-80a1-99a1e470c247 authentication.kubernetes.io/node-name: - ip-10-0-137-168.ec2.internal authentication.kubernetes.io/node-uid: - 58973fab-c1f5-4ef2-9a1b-4eb6280a7a0b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-wgxbr authentication.kubernetes.io/pod-uid: - 613706c9-971d-4afb-bec1-093b211a3b51 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 99d880a5-672c-440f-be92-a4387e111804 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T19:01:48Z" lastUpdateTime: "2026-07-15T19:01:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gdz2z" reason: AutoApproved status: "True" type: Approved