--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T19:41:12Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T19:41:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T19:41:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T19:41:12Z" name: system:openshift:openshift-monitoring-hbdxs resourceVersion: "8487" uid: 34a7a3d8-643d-4ffd-948a-ebdfa910c46c spec: extra: authentication.kubernetes.io/credential-id: - JTI=2c526bbb-cc8b-4a29-844a-6bc67bd13c8c authentication.kubernetes.io/node-name: - ip-10-0-138-163.ec2.internal authentication.kubernetes.io/node-uid: - ac1756f0-3ab3-4cf8-9660-e71d1a7f31e8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-5zrdx authentication.kubernetes.io/pod-uid: - d6138ab9-20a6-4d42-b351-b5cc6efe818b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 29e79ea1-7ce9-4966-b89f-af56dd7344f0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T19:41:12Z" lastUpdateTime: "2026-09-16T19:41:12Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hbdxs" reason: AutoApproved status: "True" type: Approved