--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T13:24:01Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T13:24:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T13:24:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T13:24:01Z" name: system:openshift:openshift-monitoring-rwp8l resourceVersion: "8301" uid: 6f07df9a-c1c8-4144-a73f-e5c1e78b3842 spec: extra: authentication.kubernetes.io/credential-id: - JTI=44ac4d5b-a4e8-45ba-bbd7-9a8c7f96c6e3 authentication.kubernetes.io/node-name: - ip-10-0-138-212.ec2.internal authentication.kubernetes.io/node-uid: - a1306d7e-fa45-43c3-aba1-d5d47a8f68b4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-p8wlv authentication.kubernetes.io/pod-uid: - cf4d6258-b250-4459-bc25-e07aa3cbd1f3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 85d66d52-760d-4101-ac82-fd9637d3af65 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T13:24:01Z" lastUpdateTime: "2026-07-08T13:24:01Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rwp8l" reason: AutoApproved status: "True" type: Approved