--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T11:50:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T11:50:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T11:50:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T11:50:17Z" name: system:openshift:openshift-monitoring-k4fbw resourceVersion: "8206" uid: bb52fa13-5a11-459c-888c-9f6f0531755f spec: extra: authentication.kubernetes.io/credential-id: - JTI=bccbf336-6c97-4bfc-a8f0-cdb50ce00880 authentication.kubernetes.io/node-name: - ip-10-0-139-53.ec2.internal authentication.kubernetes.io/node-uid: - c955820d-308d-4e4a-9560-5a2341f27f75 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-6d5qv authentication.kubernetes.io/pod-uid: - 6d4ee488-c2ce-4995-8f7c-236d680603fc groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d536cbe5-f947-4c5e-a2fe-ac9c73d46694 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T11:50:17Z" lastUpdateTime: "2026-07-27T11:50:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-k4fbw" reason: AutoApproved status: "True" type: Approved