--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:48:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T18:48:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T18:48:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:49:01Z" name: system:openshift:openshift-monitoring-lmx4q resourceVersion: "8009" uid: f270dcef-ceea-41ec-9520-e5893cb9159b spec: extra: authentication.kubernetes.io/credential-id: - JTI=9085f6f9-780a-4ec7-9dcd-4b20bcc1d1a9 authentication.kubernetes.io/node-name: - ip-10-0-143-56.ec2.internal authentication.kubernetes.io/node-uid: - a930075f-6888-476d-b7ec-0679aeb310a4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-7fshx authentication.kubernetes.io/pod-uid: - 76eb6fb3-6155-4b2e-86d2-e26d23bbb6f3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1f352d81-bbe0-456f-99f5-fdf86eeb4e8f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:48:56Z" lastUpdateTime: "2026-04-22T18:48:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lmx4q" reason: AutoApproved status: "True" type: Approved