--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:08:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T20:08:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T20:08:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:08:13Z" name: system:openshift:openshift-monitoring-lb2n2 resourceVersion: "6863" uid: 51ff1295-f854-43d0-8a2e-e621a42b5696 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4400aa46-189a-4e56-9ef2-9737a33a05bb authentication.kubernetes.io/node-name: - ip-10-0-132-171.us-west-1.compute.internal authentication.kubernetes.io/node-uid: - e00be89f-38ef-412e-8972-1674d96bbeb5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-smk55 authentication.kubernetes.io/pod-uid: - b89b7a25-70f1-4c8c-b956-0b2a4a0ace49 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 60c37d20-6ed0-4327-a6b4-85cb6435a72d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T20:08:02Z" lastUpdateTime: "2026-11-03T20:08:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lb2n2" reason: AutoApproved status: "True" type: Approved