--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T15:45:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T15:45:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T15:45:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T15:46:02Z" name: system:openshift:openshift-monitoring-7c5xd resourceVersion: "7954" uid: 40872ff5-dec3-4bb5-ae99-2450fa7ededd spec: extra: authentication.kubernetes.io/credential-id: - JTI=e45e64c2-396c-4c58-a7dc-2b9993ea2c8e authentication.kubernetes.io/node-name: - ip-10-0-130-163.ec2.internal authentication.kubernetes.io/node-uid: - 1924a6cd-6ed0-4efa-b7ac-0bbb2bec642b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-2szt4 authentication.kubernetes.io/pod-uid: - 374a87cf-01a6-41e3-be18-57a55087ecde groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b795b134-3203-47e3-87a4-4063695e1fa2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T15:45:58Z" lastUpdateTime: "2026-07-31T15:45:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7c5xd" reason: AutoApproved status: "True" type: Approved