--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T20:57:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T20:57:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T20:57:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T20:58:02Z" name: system:openshift:openshift-monitoring-fdq8k resourceVersion: "8998" uid: 0ef00f95-5d50-48f8-9b87-8e57697fa217 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0bee3bda-b468-491d-873e-6e8429df7833 authentication.kubernetes.io/node-name: - ip-10-0-130-77.ec2.internal authentication.kubernetes.io/node-uid: - 741dfa32-4050-4692-a971-0a305ba386e6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-d8pmr authentication.kubernetes.io/pod-uid: - 11e14f57-0944-43f7-8e71-8192b0ecf7dc groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUTA4a0RkU3VqMTVKMllDTm9tK3U1THM1blFDcWQxVC8xc252bldzQTZ3Mzc1TmVvWUMKcituMHZnOTZXblUxQXVTTmJRWkU5V3dsSDBnVnp1WE5JM0hEb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTlp6TU5ob0tKbDhJRnNyMGtCMWdtSHpvbCt6K2xPKzY1TC9PTE9SRlpNSEFpRUF6WWFKQkdBc3o2aGhra1JvCnBibEYwc1luYTVCdzJJN2ZJV1pUK21pZzBiVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: a90b767e-e336-41be-9bb1-183b2ab5b1b5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T20:57:55Z" lastUpdateTime: "2026-06-09T20:57:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fdq8k" reason: AutoApproved status: "True" type: Approved