--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T06:43:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T06:43:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T06:43:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T06:43:51Z" name: system:openshift:openshift-monitoring-gfwm9 resourceVersion: "9015" uid: 0252a0ba-9f18-4ea6-994c-7d922170a131 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3416ead1-153c-494f-88aa-60b12ff1dac7 authentication.kubernetes.io/node-name: - ip-10-0-140-113.ec2.internal authentication.kubernetes.io/node-uid: - c70694db-74a8-49fc-9ff4-ae04e0439ca4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-k2dk9 authentication.kubernetes.io/pod-uid: - 9cf19267-ad5e-4b01-8bc1-cf40c6b59525 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJEeTJaYm1scExIdHg2NlZzdVYyblNxUlhYZS9FZngzczJaYlJkQlFEZUJuZ2tVeDBJWVQKaDZSZ01wWER3cE5RUkFrNllndzZpM2ZMM2krZlhKRnR3NHlnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBTQpmZmptT3RSZEVmc2FSK0dpWC82ZjB2WGFTSnU2ZGNIMithRjlHSkZlalFJZ1FRdHU4dWJqVGJReTIvZUdwdTM5Cmd4MFpKSVVXbUZLUTZrT1JpbnhBK3ZzPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: e82c3c82-edab-41cf-978e-94998558827f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T06:43:46Z" lastUpdateTime: "2026-06-14T06:43:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gfwm9" reason: AutoApproved status: "True" type: Approved