--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T15:37:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-03T15:37:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-03T15:37:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T15:37:52Z" name: system:openshift:openshift-monitoring-p6hxf resourceVersion: "8190" uid: ebc8d3c5-5801-4b3c-a7ae-6939e8d3d880 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9b64afe1-e3e8-472a-b1bb-22c13799e375 authentication.kubernetes.io/node-name: - ip-10-0-130-37.ec2.internal authentication.kubernetes.io/node-uid: - 73dc3b36-2311-4c7e-a9d4-b9d9a098184a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-gv4cp authentication.kubernetes.io/pod-uid: - 74f8923d-a32d-4d6f-9fc8-e37559eb5896 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ec0bdbab-c1a2-4f7a-bb22-3bc35b826d11 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T15:37:49Z" lastUpdateTime: "2026-06-03T15:37:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-p6hxf" reason: AutoApproved status: "True" type: Approved