--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T07:28:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-31T07:28:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-31T07:28:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T07:28:24Z" name: system:openshift:openshift-monitoring-wt7tn resourceVersion: "6825" uid: 5b600c10-63f6-41c9-b025-0349fa3cf369 spec: extra: authentication.kubernetes.io/credential-id: - JTI=07d3837e-061b-4ab6-af7d-4fa10a59285f authentication.kubernetes.io/node-name: - ip-10-0-128-20.ec2.internal authentication.kubernetes.io/node-uid: - 744879d5-8351-4539-a4fa-b19a45c11714 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-84prv authentication.kubernetes.io/pod-uid: - 078fdc95-76b1-4323-9985-905f939dbbc4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6f75e522-a068-41e4-9ff0-f95fc098cd4b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T07:28:17Z" lastUpdateTime: "2026-10-31T07:28:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-wt7tn" reason: AutoApproved status: "True" type: Approved