--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T16:39:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T16:39:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T16:39:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T16:39:49Z" name: system:openshift:openshift-monitoring-8745l resourceVersion: "8195" uid: 70ce6c72-7fcb-4f65-a7ea-0e6d4aca6842 spec: extra: authentication.kubernetes.io/credential-id: - JTI=93354f2c-4a4c-475b-8397-62d1ecc6c1e0 authentication.kubernetes.io/node-name: - ip-10-0-143-15.ec2.internal authentication.kubernetes.io/node-uid: - 4b73aa8e-a44c-47a2-ad21-b742f4f55a2d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-sksmc authentication.kubernetes.io/pod-uid: - 56acd41c-facb-493d-8eac-8cff2fac85ec groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: da7cf0d3-33ba-4566-bf9b-65f8d0cf2c2c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T16:39:49Z" lastUpdateTime: "2026-07-01T16:39:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8745l" reason: AutoApproved status: "True" type: Approved