--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:40:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T18:40:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:40:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T18:40:46Z" name: system:openshift:openshift-monitoring-m2szr resourceVersion: "8369" uid: a5c3ac60-091c-4e3a-b2ee-3d89d9eddfaf spec: extra: authentication.kubernetes.io/credential-id: - JTI=386f4c00-8f8f-4dbb-b2cd-58fce042e394 authentication.kubernetes.io/node-name: - ip-10-0-140-194.ec2.internal authentication.kubernetes.io/node-uid: - 9a3a211a-e73b-4fdc-9faa-b3219d163531 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-qcr7l authentication.kubernetes.io/pod-uid: - 1ca5000b-7618-4602-8388-1c272aa30ae8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJFS0QwcHRpYXh3bkZsN0FUdHlreU9oOTRhZEJRMDBDMnVMSVNreGhVclBYRG1nSkRnengKSW1kOXArdnJGME5abUlOdlZGY1pzRC9WMllJVWlqemxRYm1nQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCQwp3b25MMDI0WWdpUkRQSEFnK2tWeDlHQVlDdzVsdFBDdnlUaUtLdG4yY2dJZ2ZVM1Y5NkRPWjR1MTF0bFMxWEc4CjVTMXRMN2p2a0wvZFdZZVZSVTVzbzVJPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: ea5012d9-57f0-41bb-bb43-ba46da0e3b70 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:40:46Z" lastUpdateTime: "2026-09-17T18:40:46Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-m2szr" reason: AutoApproved status: "True" type: Approved