--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T16:40:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T16:40:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T16:40:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T16:40:32Z" name: system:openshift:openshift-monitoring-skn7r resourceVersion: "8028" uid: f561daf4-8dbe-4f4d-84f0-d5147c9c5072 spec: extra: authentication.kubernetes.io/credential-id: - JTI=fffa3796-e500-4539-9302-29169651624b authentication.kubernetes.io/node-name: - ip-10-0-140-177.ec2.internal authentication.kubernetes.io/node-uid: - 042bc0ae-0856-449f-bb90-d2ac85874b40 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-jqbf7 authentication.kubernetes.io/pod-uid: - 9c407da2-bb8e-47de-9ee4-44be6644d321 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b48c71c3-3469-4ef9-b152-4bdab2106a30 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T16:40:29Z" lastUpdateTime: "2026-07-16T16:40:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-skn7r" reason: AutoApproved status: "True" type: Approved