--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T16:18:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T16:18:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T16:18:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T16:18:26Z" name: system:openshift:openshift-monitoring-4f4rz resourceVersion: "8167" uid: e671510e-2008-4ecf-a7e5-7947e0a90e58 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e4957fa7-cca5-4c79-a227-61cf57cad01a authentication.kubernetes.io/node-name: - ip-10-0-142-248.ec2.internal authentication.kubernetes.io/node-uid: - 5fcde487-44ed-4c18-b6f5-e7357dad7404 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-2dmxt authentication.kubernetes.io/pod-uid: - ba15f5ca-5cac-48e7-9622-e3166bdc1dca groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c71795dc-186d-4c93-94ab-f013f259199a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T16:18:26Z" lastUpdateTime: "2026-09-11T16:18:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4f4rz" reason: AutoApproved status: "True" type: Approved