--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T13:23:07Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-26T13:23:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T13:23:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-26T13:23:07Z" name: system:openshift:openshift-monitoring-b8r58 resourceVersion: "8129" uid: c19f6933-2484-4cef-9eb4-d7b8eab6a5d2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5b2dd793-dba4-4237-803d-b50619a8bc9e authentication.kubernetes.io/node-name: - ip-10-0-139-201.ec2.internal authentication.kubernetes.io/node-uid: - 61684e45-d1fb-4e26-9055-0de472e50734 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-dwv2l authentication.kubernetes.io/pod-uid: - 624bd962-4056-4f47-9060-8ca4390b265d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2ca4b07e-bf74-45c2-9121-ba6e7cdcb8f9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T13:23:07Z" lastUpdateTime: "2026-05-26T13:23:07Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-b8r58" reason: AutoApproved status: "True" type: Approved