--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T10:13:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T10:13:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T10:13:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T10:13:17Z" name: system:openshift:openshift-monitoring-2xrmc resourceVersion: "8343" uid: de11fe77-933f-4228-945c-d59d92ccc23d spec: extra: authentication.kubernetes.io/credential-id: - JTI=3ef48c45-0e6b-4f45-9712-4d2f20c5f839 authentication.kubernetes.io/node-name: - ip-10-0-131-173.ec2.internal authentication.kubernetes.io/node-uid: - 885a99e7-f569-4c8d-95f8-77b3b2833a9a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-hjjkh authentication.kubernetes.io/pod-uid: - c47570d4-05e1-45c3-a5ec-c8c1bc18020b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6677a495-586e-4e57-a0fd-d4190cd7f885 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T10:13:17Z" lastUpdateTime: "2026-07-15T10:13:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2xrmc" reason: AutoApproved status: "True" type: Approved