--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T08:01:11Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T08:01:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T08:01:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T08:01:11Z" name: system:openshift:openshift-monitoring-kjsff resourceVersion: "8238" uid: bcb236de-d16b-4300-a3e2-ceaa23b9e52f spec: extra: authentication.kubernetes.io/credential-id: - JTI=96b0e6f9-d967-418d-add8-1018486dca9f authentication.kubernetes.io/node-name: - ip-10-0-131-93.ec2.internal authentication.kubernetes.io/node-uid: - 523454cf-c19a-48c5-ab8b-f86e4d71faae authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-n8h97 authentication.kubernetes.io/pod-uid: - fc3c0800-96ca-4e2d-96d8-f1cce3a7ac0a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ea59856d-965d-436f-80de-0fe52cda384b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T08:01:11Z" lastUpdateTime: "2026-09-11T08:01:11Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kjsff" reason: AutoApproved status: "True" type: Approved