--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T12:30:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T12:30:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T12:30:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T12:30:56Z" name: system:openshift:openshift-monitoring-hdw8r resourceVersion: "8110" uid: 7e600147-2b83-4842-89a6-8e4f833a366e spec: extra: authentication.kubernetes.io/credential-id: - JTI=e9c89623-f32d-4c7a-9f4e-423941992eaa authentication.kubernetes.io/node-name: - ip-10-0-131-56.ec2.internal authentication.kubernetes.io/node-uid: - 5ce79296-3d7d-473a-9543-f249d8b505b5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-kkf8q authentication.kubernetes.io/pod-uid: - 2db03e27-ffd8-449f-bc8a-c29846c80d4e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 47c1d100-2dac-4e69-92c2-87190b8919e7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T12:30:56Z" lastUpdateTime: "2026-06-09T12:30:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hdw8r" reason: AutoApproved status: "True" type: Approved