--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T01:02:52Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-04T01:02:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-04T01:02:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T01:02:57Z" name: system:openshift:openshift-monitoring-j5sqm resourceVersion: "6874" uid: 02c01b8e-46e9-4358-a2ce-86e3457f376a spec: extra: authentication.kubernetes.io/credential-id: - JTI=635e33c8-caa6-41ce-9cb3-2a715a60a7ad authentication.kubernetes.io/node-name: - ip-10-0-132-67.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - ded1b416-6207-48c3-88e9-c374a391c054 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-6vxbv authentication.kubernetes.io/pod-uid: - 28a8304b-9226-422d-9044-b50678d52971 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9332886b-2e48-4ce1-b2a7-d732432b41fa usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T01:02:52Z" lastUpdateTime: "2026-11-04T01:02:52Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-j5sqm" reason: AutoApproved status: "True" type: Approved