--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T00:12:35Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T00:12:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T00:12:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T00:12:35Z" name: system:openshift:openshift-monitoring-dhthh resourceVersion: "9380" uid: 7111010f-9303-4c40-9e35-a269631fcae7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=59fdbafc-c1e7-41ef-b3bb-0456266168e5 authentication.kubernetes.io/node-name: - ip-10-0-134-124.ec2.internal authentication.kubernetes.io/node-uid: - 47790983-5d5a-446d-aba5-11e0849467b2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-qm5ml authentication.kubernetes.io/pod-uid: - 165778da-7482-49cf-948f-5440431f12e1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f6bbb36c-c168-44ae-a6a8-85b439a2b871 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T00:12:35Z" lastUpdateTime: "2026-07-23T00:12:35Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-dhthh" reason: AutoApproved status: "True" type: Approved