--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T15:08:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T15:08:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T15:08:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T15:08:50Z" name: system:openshift:openshift-monitoring-7tgds resourceVersion: "7300" uid: ac4ac3cf-e4bc-45cb-bd7b-1a6178161ac6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d4d2f677-280e-4bf2-8067-bc16729b5b98 authentication.kubernetes.io/node-name: - ip-10-0-131-168.ec2.internal authentication.kubernetes.io/node-uid: - 347fabb5-d399-4a3b-a5f0-c8cbc750baa9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-29bzc authentication.kubernetes.io/pod-uid: - a84180fa-5ffa-4cc6-80cc-0cd55558a345 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1dc79047-eaa4-49d6-a1cc-196edd28970e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T15:08:50Z" lastUpdateTime: "2026-04-22T15:08:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7tgds" reason: AutoApproved status: "True" type: Approved