--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T21:52:36Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T21:52:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T21:52:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T21:52:36Z" name: system:openshift:openshift-monitoring-xd4xs resourceVersion: "8047" uid: 67528f80-8f1e-468e-8975-5d1df9fcd0b5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0781b25f-d95f-4745-8cba-9e4ab6e599ec authentication.kubernetes.io/node-name: - ip-10-0-143-223.ec2.internal authentication.kubernetes.io/node-uid: - 61f55ccf-e2c9-421c-801a-4262a986d734 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-n9zrt authentication.kubernetes.io/pod-uid: - 335b3ca4-7b4a-4e04-b53f-f24a0c7b7e58 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVGtpbUpWTnllVjNKdUFUR2hXN2hwTzdMUHFCbGdEcEQ4OE5jYko3eFExdEdWYk55aEIKenZUQUFwV3c2NHJqNUEwdnNJalhBWWFGRjJIUFpnSEFKelp2b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTGhud05BZHR0Z05JbStsSGhGT0RZTnFXUFZLMjZ1dEZiV1FkK3dWWUozNUFpRUF2cE5TOThuRUxmazhVeHRuCjVFTmxaaDZkVFNxRUhaVS9EMlNodGRodDZpND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 5f98f675-b4a2-4b0e-88dd-fb67527e6990 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T21:52:36Z" lastUpdateTime: "2026-07-23T21:52:36Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xd4xs" reason: AutoApproved status: "True" type: Approved