--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T18:18:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T18:18:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T18:18:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T18:18:33Z" name: system:openshift:openshift-monitoring-9pbzb resourceVersion: "8369" uid: c818a5cc-f228-4936-93a7-24f588bf4a09 spec: extra: authentication.kubernetes.io/credential-id: - JTI=edaf8030-98d6-499f-b1c9-7de73207aad2 authentication.kubernetes.io/node-name: - ip-10-0-132-151.ec2.internal authentication.kubernetes.io/node-uid: - d54b0f45-6f24-4d12-a114-ec6c53109749 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-scpbz authentication.kubernetes.io/pod-uid: - 20f79a38-b179-4205-bf87-71983574bfdd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 41d0fb81-bd9b-4a48-b92b-960747a182e6 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T18:18:33Z" lastUpdateTime: "2026-07-10T18:18:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9pbzb" reason: AutoApproved status: "True" type: Approved