--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T20:32:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-05T20:32:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T20:32:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-05T20:32:34Z" name: system:openshift:openshift-monitoring-8zfjp resourceVersion: "9298" uid: 27e31bc5-2d77-4db4-b774-38fd608345c5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=fde242b5-4346-48bb-8aca-6acdf0e0a9da authentication.kubernetes.io/node-name: - ip-10-0-133-23.ec2.internal authentication.kubernetes.io/node-uid: - 72ad03c4-0703-4acd-9d36-d3bf80f3b4b5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-wlfnn authentication.kubernetes.io/pod-uid: - 953a8b85-c9e1-469b-a230-0da7037e725d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a6bb210e-d4b6-4b30-9f1c-ef1bcfa0647b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-05T20:32:34Z" lastUpdateTime: "2026-06-05T20:32:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8zfjp" reason: AutoApproved status: "True" type: Approved