--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T19:02:20Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T19:02:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T19:02:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T19:02:20Z" name: system:openshift:openshift-monitoring-2nrz2 resourceVersion: "8287" uid: d97d4b4e-fa30-45de-91fe-1ac21b8ae703 spec: extra: authentication.kubernetes.io/credential-id: - JTI=986a394c-da7f-4c8f-b53a-6f85dcf9a173 authentication.kubernetes.io/node-name: - ip-10-0-140-243.ec2.internal authentication.kubernetes.io/node-uid: - 3a5773e5-fd77-4ce5-a240-06e87e01ee16 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-gvrw9 authentication.kubernetes.io/pod-uid: - ccb7fdf2-25fc-4996-b5d2-c532576b4627 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: defd7a2d-ca4c-43c9-bc7e-b3326ac2f273 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T19:02:20Z" lastUpdateTime: "2026-07-07T19:02:20Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2nrz2" reason: AutoApproved status: "True" type: Approved