--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T12:25:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T12:25:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T12:25:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T12:25:51Z" name: system:openshift:openshift-monitoring-lg8sj resourceVersion: "6751" uid: b5e961f5-ae2d-4fcb-90fb-226c45bec320 spec: extra: authentication.kubernetes.io/credential-id: - JTI=ada48b22-6c7e-450d-9e88-63ba72c3398c authentication.kubernetes.io/node-name: - ip-10-0-141-60.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - 32a2a44c-7644-4e85-aa11-9afe2da1a0c1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-jv87w authentication.kubernetes.io/pod-uid: - 965f8f26-3536-4c85-b310-348cdfd391b3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4ff480fd-6b8c-47ac-8271-ef28fb55ce77 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T12:25:44Z" lastUpdateTime: "2026-11-03T12:25:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lg8sj" reason: AutoApproved status: "True" type: Approved