--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T17:25:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T17:25:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T17:25:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T17:25:48Z" name: system:openshift:openshift-monitoring-9fkg5 resourceVersion: "7818" uid: 8b0112a9-ee74-4381-84da-89e9b09647c1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=818a342f-92bf-45d0-a5cb-edc6ae5be5fd authentication.kubernetes.io/node-name: - ip-10-0-130-17.ec2.internal authentication.kubernetes.io/node-uid: - 9a337354-4f80-467d-ac20-1c622724137d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-tzqfr authentication.kubernetes.io/pod-uid: - 2e1343de-f52a-4262-8e36-2270dd39d6a2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 62bdf6b8-5176-4f9f-8732-a9a475dda651 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T17:25:48Z" lastUpdateTime: "2026-04-17T17:25:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9fkg5" reason: AutoApproved status: "True" type: Approved