--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T12:55:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T12:55:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T12:55:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T12:55:22Z" name: system:openshift:openshift-monitoring-5wpj4 resourceVersion: "8462" uid: fa4fe12e-685a-43c5-9b42-ab45643b3dee spec: extra: authentication.kubernetes.io/credential-id: - JTI=d956c241-40ba-49f0-8ca4-0017ac0ccf97 authentication.kubernetes.io/node-name: - ip-10-0-131-255.ec2.internal authentication.kubernetes.io/node-uid: - 1f88c23d-a8eb-486a-95ee-bf8d61493bbb authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-b9vj2 authentication.kubernetes.io/pod-uid: - 2dfc7362-1ab5-42ff-a1f8-a2235ace1132 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 05c437fa-2ff8-41a8-ab40-8b35bbfacdcd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T12:55:22Z" lastUpdateTime: "2026-07-31T12:55:22Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5wpj4" reason: AutoApproved status: "True" type: Approved