--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T17:05:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T17:05:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T17:05:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T17:05:59Z" name: system:openshift:openshift-monitoring-7k6cb resourceVersion: "7947" uid: f225e081-0241-4115-baee-185dd9e04d06 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cf9851fb-edc5-4e34-9fcb-2ca4eb5a629a authentication.kubernetes.io/node-name: - ip-10-0-136-29.ec2.internal authentication.kubernetes.io/node-uid: - f90f7b8a-cd0e-43a2-afd4-8915f14580d7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-k98pv authentication.kubernetes.io/pod-uid: - 3582e243-6f99-400c-b7e4-e4847ba68e9b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ad2ba7ac-94b5-4696-b50b-ddc25e4ace54 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T17:05:57Z" lastUpdateTime: "2026-07-23T17:05:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7k6cb" reason: AutoApproved status: "True" type: Approved