--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T23:23:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T23:23:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T23:23:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T23:23:40Z" name: system:openshift:openshift-monitoring-xlbxj resourceVersion: "8362" uid: 1ce6c0ac-0a5d-4cc0-9b3c-b95c525abbe5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=94886eef-fcd3-4ceb-aa8e-6a242d00b456 authentication.kubernetes.io/node-name: - ip-10-0-130-115.ec2.internal authentication.kubernetes.io/node-uid: - 20b02451-da41-474d-9d67-01c0bc0b357e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-cjjvx authentication.kubernetes.io/pod-uid: - 6162850d-acc9-41e3-83f0-2c324b0e9f94 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJLZTZ3SEJYeVdxREJkZGlFaGRCbjhSbTg5VktMK2NmTTc0bVVjV1NvTzVCVzRuVTl0bHoKeGVkSG1wczZTR2lXYmhkV2drN3MxMFRrdUFnVWtiYkhrM3FnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQo3Q3UwS0tocy9xeGtseEQwMm5uMUdmRU1OU25FNDF6TUJ5SGExd2RtQ3pRQ0lDK0FMR2htM3FoYlA3RjI4MzNQCjAxMWJiZUsxSkxodGc1R1UrcGlqN2FTcwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: e09214fc-435c-43d6-b346-80f5714903c9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T23:23:39Z" lastUpdateTime: "2026-07-02T23:23:39Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xlbxj" reason: AutoApproved status: "True" type: Approved