--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T20:58:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T20:58:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T20:58:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T20:58:36Z" name: system:openshift:openshift-monitoring-5gqnc resourceVersion: "9336" uid: 67a710b9-cb6b-4545-99d1-530c64377056 spec: extra: authentication.kubernetes.io/credential-id: - JTI=35d4f3d8-f007-43ae-a0af-d4f58dc18965 authentication.kubernetes.io/node-name: - ip-10-0-138-146.ec2.internal authentication.kubernetes.io/node-uid: - 88d0b125-a796-4e75-944d-c0f38e34b725 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-2vxxv authentication.kubernetes.io/pod-uid: - 90d21d66-81d6-464c-a857-7d43f52beb1d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7caee2ef-79b3-41c6-830f-4206a628ce42 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T20:58:23Z" lastUpdateTime: "2026-07-13T20:58:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5gqnc" reason: AutoApproved status: "True" type: Approved