--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T21:02:10Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T21:02:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T21:02:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T21:02:10Z" name: system:openshift:openshift-monitoring-hsd6j resourceVersion: "8527" uid: 500c24a3-797f-48c3-9ac6-7617a13b8a3e spec: extra: authentication.kubernetes.io/credential-id: - JTI=7a0bd731-92d8-4807-beb2-ad6cea34574b authentication.kubernetes.io/node-name: - ip-10-0-140-97.ec2.internal authentication.kubernetes.io/node-uid: - a9d0fdc8-3945-4642-8033-a12748b4ba8e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-7px4w authentication.kubernetes.io/pod-uid: - 76e94cf3-ab49-4698-8ac9-bf3ad1dcdf3a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 734d6fde-9993-4f25-b8d9-c3e543fba208 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T21:02:10Z" lastUpdateTime: "2026-07-21T21:02:10Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hsd6j" reason: AutoApproved status: "True" type: Approved