--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T13:24:01Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T13:24:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T13:24:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T13:24:01Z" name: system:openshift:openshift-monitoring-k5szn resourceVersion: "8304" uid: aa8c6ecb-3ccd-4e3d-918e-c0c0bf7a9498 spec: extra: authentication.kubernetes.io/credential-id: - JTI=44ac4d5b-a4e8-45ba-bbd7-9a8c7f96c6e3 authentication.kubernetes.io/node-name: - ip-10-0-138-212.ec2.internal authentication.kubernetes.io/node-uid: - a1306d7e-fa45-43c3-aba1-d5d47a8f68b4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-p8wlv authentication.kubernetes.io/pod-uid: - cf4d6258-b250-4459-bc25-e07aa3cbd1f3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 85d66d52-760d-4101-ac82-fd9637d3af65 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T13:24:01Z" lastUpdateTime: "2026-07-08T13:24:01Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-k5szn" reason: AutoApproved status: "True" type: Approved