--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T13:46:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T13:46:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T13:46:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T13:46:42Z" name: system:openshift:openshift-monitoring-hx62j resourceVersion: "8090" uid: 20a59457-8c01-4a06-a710-e4bfa3628af4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=005bd5a1-dcff-4a55-993a-147a76f76fad authentication.kubernetes.io/node-name: - ip-10-0-134-85.ec2.internal authentication.kubernetes.io/node-uid: - 3633146d-9184-4c3a-9fcf-f8529374d28a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-gnsd2 authentication.kubernetes.io/pod-uid: - 377826fd-f531-4a58-98a8-bc2b2e536fb7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJDTEF6OHc2V2xSL2RFb1pDQnVLVHlEcHhoM1FMZUVRb2JMbVROaWhpVzN3eCthM2tLVXIKVEwrbGplQ1ZOZ2x2UEFkNGNuaGJSRGVQTThNSnRXaFhQWU9nQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBVwpnNHNtbDBPZjhqMnU0WnQzSEUzMWJvQ0Z0WVRrbW5LcGllMHJTakZSTkFJZ0FTRjdkZXJ5SlZ2Vm5UYW9sMllsCitjOWxVVlplMWVJN0toTjJiWHo1a01ZPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 3691773f-e486-41e1-bf27-287c139fd18d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T13:46:39Z" lastUpdateTime: "2026-07-06T13:46:39Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hx62j" reason: AutoApproved status: "True" type: Approved