--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:08:16Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T20:08:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T20:08:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:08:27Z" name: system:openshift:openshift-monitoring-sxndm resourceVersion: "6835" uid: 25409b3f-6400-4d65-bdf3-339560bfabdf spec: extra: authentication.kubernetes.io/credential-id: - JTI=341ff7e5-936d-413b-8575-4be00afccf50 authentication.kubernetes.io/node-name: - ip-10-0-140-232.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - e74a03a0-cac9-44a6-ad7f-8dd9c81acc8f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-gtjgh authentication.kubernetes.io/pod-uid: - 20ac8029-4edd-40a5-b1f0-4bcfba3ad7c3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d3b561e8-e0e9-4e86-a6f9-9878b24dd47c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T20:08:16Z" lastUpdateTime: "2026-11-03T20:08:16Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sxndm" reason: AutoApproved status: "True" type: Approved