--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T16:18:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-08-05T16:18:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T16:18:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-08-05T16:18:51Z" name: system:openshift:openshift-monitoring-2rbxw resourceVersion: "8128" uid: a9dd2686-c0a8-4da6-b54f-e676d1fab01a spec: extra: authentication.kubernetes.io/credential-id: - JTI=b27d53e9-e755-472d-8df1-fbff05cf883c authentication.kubernetes.io/node-name: - ip-10-0-136-221.ec2.internal authentication.kubernetes.io/node-uid: - ffa45008-6208-460e-a2f9-74c60c5b38ed authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-xwh6q authentication.kubernetes.io/pod-uid: - 89917861-7a9b-4632-a33d-1be4b98d8b25 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 13c73b71-9996-4f0e-9fab-64b66c8566fd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T16:18:51Z" lastUpdateTime: "2026-08-05T16:18:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2rbxw" reason: AutoApproved status: "True" type: Approved