--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T17:03:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T17:03:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T17:03:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T17:03:15Z" name: system:openshift:openshift-monitoring-nqdc5 resourceVersion: "8286" uid: c55a4723-29c8-4498-8c73-3961b5fd9afa spec: extra: authentication.kubernetes.io/credential-id: - JTI=bd38d322-34f2-462a-8f1b-a405ed2891d7 authentication.kubernetes.io/node-name: - ip-10-0-133-202.ec2.internal authentication.kubernetes.io/node-uid: - 4479033d-e100-46aa-9bc8-339d5209e80b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-lb4kx authentication.kubernetes.io/pod-uid: - 1af05534-58f1-4858-ba37-61a3cb18d682 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 379c7f86-ebfd-4bfd-9938-18f8d1fe0449 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T17:03:15Z" lastUpdateTime: "2026-06-14T17:03:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nqdc5" reason: AutoApproved status: "True" type: Approved