--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T21:57:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-02T21:57:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-02T21:57:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T21:57:58Z" name: system:openshift:openshift-monitoring-xmq7l resourceVersion: "6938" uid: 8ab154b0-7e11-4f29-b133-94e0e694b7a4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0d2f87b5-e1b1-459a-85b9-2300379f3ec9 authentication.kubernetes.io/node-name: - ip-10-0-131-57.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 0d5195bc-2fbc-40c0-8c10-c2e3c200a88f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-g5w5w authentication.kubernetes.io/pod-uid: - a113cb77-4c64-47ea-8d09-723c2146038f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2e63587f-8aa7-4ab6-8049-ca66ea641609 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T21:57:55Z" lastUpdateTime: "2026-11-02T21:57:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xmq7l" reason: AutoApproved status: "True" type: Approved