--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T06:03:08Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T06:03:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T06:03:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T06:03:08Z" name: system:openshift:openshift-monitoring-j4g2d resourceVersion: "9486" uid: ccc8c77c-9d21-497b-85b9-bd2d704e2188 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4f865076-1e47-4fc1-9b79-5962eacbe84b authentication.kubernetes.io/node-name: - ip-10-0-140-231.ec2.internal authentication.kubernetes.io/node-uid: - d4c48f33-09c9-4866-9da7-6719875662d8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-rth6x authentication.kubernetes.io/pod-uid: - 268fd6e5-0bec-4a5b-af0c-9a547256d5b1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJMNU5ORUNSOUN6WGZqTkE5Y1lvZ3QxNnlzdkxDNngvK0FXN0FUbzNaVGFmSW00dmRKVksKRXJRRXJONmlLZTViaGk4dGlLbytwNnlEMWNXUDgxV3dKOUtnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCKwo4b2RNNWg1ZVhsN05JQ1VtbkFiREVjU1FhVmN0TVpGbTVEeHhpRFZrNkFJaEFPMmtFbGJUdFpNcmd2cnU5U1hHCmhBcGdHM2k1Nyt3TGkxdStIK2xtamlTYgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 60c2fb5e-4f5f-479a-a3d3-9e4d43e3cd6a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T06:03:08Z" lastUpdateTime: "2026-06-14T06:03:08Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-j4g2d" reason: AutoApproved status: "True" type: Approved