--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T09:39:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-20T09:39:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T09:39:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-20T09:39:57Z" name: system:openshift:openshift-monitoring-mbvrh resourceVersion: "8425" uid: 0aaf2833-2f26-4c68-8de2-ca3213b6f906 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3eab1198-0bbd-40bc-838b-ecfecd24fd65 authentication.kubernetes.io/node-name: - ip-10-0-142-133.ec2.internal authentication.kubernetes.io/node-uid: - 672d13a5-18ad-4160-9eb3-0aa7f9803f60 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-7ctq2 authentication.kubernetes.io/pod-uid: - 23f8474e-2d4a-4a50-b981-d506c0607319 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUTdIbFJ5U1NaSFpqOGp3eEZaaDdLLzFpVHFIM3FjcnpRbXlVTGZjSW56RWF6N0ppd1UKSUdueXcxTVZ4U1ZYeE8xa3hWU2ZXTnRGWGV2bURxQURMTnZob0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBS0hDWUUrcjl1VGMyUDJUaGJRUHhJVWRoTHBBRHYzb2l2Mm5jWHdyNy9NTkFpRUEwSk1RZjI5VHZML2U0RmFqCnhjczdTYWZ4UUZCZ2VVdXBMeVJZTEw0akVORT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 2168d5d3-5c12-42b6-a888-cb61f9256354 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T09:39:57Z" lastUpdateTime: "2026-07-20T09:39:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mbvrh" reason: AutoApproved status: "True" type: Approved