--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T14:36:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T14:36:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T14:36:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T14:36:49Z" name: system:openshift:openshift-monitoring-pc4wm resourceVersion: "8555" uid: 91fcc0f7-f46c-4391-852a-5c36ec79b578 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0e55376c-e7c3-4578-9773-a2c23538fb77 authentication.kubernetes.io/node-name: - ip-10-0-131-12.ec2.internal authentication.kubernetes.io/node-uid: - 2b4643bd-be4b-4b96-86f0-bb402c338dc2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-tzpfp authentication.kubernetes.io/pod-uid: - ad44feb0-98db-4e8f-b9f9-b7495d6adf97 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e85879ae-aa58-4c6c-b0d0-c96a409c2e19 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T14:36:49Z" lastUpdateTime: "2026-07-24T14:36:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pc4wm" reason: AutoApproved status: "True" type: Approved