--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T03:49:20Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-04T03:49:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-04T03:49:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T03:49:35Z" name: system:openshift:openshift-monitoring-ncnnk resourceVersion: "6728" uid: c72535d9-cd61-482b-a926-c48bf1a1a378 spec: extra: authentication.kubernetes.io/credential-id: - JTI=588667d3-ce2e-47e5-af5a-818922608db5 authentication.kubernetes.io/node-name: - ip-10-0-138-9.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 84b2ab30-de69-44c1-9468-230d578a9679 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-qmh6r authentication.kubernetes.io/pod-uid: - 0df87f5d-31f4-4571-82b6-fe75c434ff27 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 94908ea1-dc22-4d2f-8b78-37cbdc4e528b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T03:49:20Z" lastUpdateTime: "2026-11-04T03:49:20Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ncnnk" reason: AutoApproved status: "True" type: Approved