--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T09:01:32Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T09:01:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T09:01:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T09:01:34Z" name: system:openshift:openshift-monitoring-kq8qj resourceVersion: "8114" uid: 8c9a8647-0ba4-49da-8819-98fd9d9288e8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5dd96858-a60a-4bc6-ad07-563e4bdebbd7 authentication.kubernetes.io/node-name: - ip-10-0-139-159.ec2.internal authentication.kubernetes.io/node-uid: - f03c4811-58fa-4a3b-a100-d48f4a93edf9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-qfn6x authentication.kubernetes.io/pod-uid: - bd11ad22-b6e3-4069-829f-2291979ad918 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9a06be12-c872-483c-93e7-258637adc2e0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T09:01:32Z" lastUpdateTime: "2026-07-24T09:01:32Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kq8qj" reason: AutoApproved status: "True" type: Approved