--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T16:28:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T16:28:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T16:28:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T16:28:17Z" name: system:openshift:openshift-monitoring-krhbx resourceVersion: "9252" uid: 0d59088c-572a-43fd-8e0f-1e7a7eb98ed5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7f30b312-26f0-43ad-a3ee-8cc2816a5c52 authentication.kubernetes.io/node-name: - ip-10-0-129-6.ec2.internal authentication.kubernetes.io/node-uid: - c8b7dee1-ff10-411e-b1d5-db82629b2949 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-xr746 authentication.kubernetes.io/pod-uid: - 740adb53-e810-41c9-856a-0954705c32c0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVDRoNTREbFpzTlg3NGp4aFZRRDYrdytiMUdxbkNQQ0NoQnFDTlRoekhQTFo2SmY3UWwKenphdG9WZ2c1WGIxUnV4Ymh1b09ZN1ZOSWdDMTlhekZha2xXb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSmNZZlZxWjlvS3A1VEpVbHVrbXVZRlk3cTFCdFY0MCt0WDdsWkpzNTNCdkFpRUExaVFTMnQ1QTNBbitReVFXCmFJYkJIa0FkSHBCUjlYNXpETDhWeHhIQWF0cz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 0a0596ce-f4d4-4a7e-84a2-1c5cad933e27 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T16:28:17Z" lastUpdateTime: "2026-07-07T16:28:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-krhbx" reason: AutoApproved status: "True" type: Approved