--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:46:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:46:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:46:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:46:43Z" name: system:openshift:openshift-monitoring-cn6bq resourceVersion: "8352" uid: f20219e9-ae5d-43bf-beb1-f008b7049309 spec: extra: authentication.kubernetes.io/credential-id: - JTI=be871fed-70ad-428a-aae4-ed3579148f16 authentication.kubernetes.io/node-name: - ip-10-0-129-152.ec2.internal authentication.kubernetes.io/node-uid: - 5729e419-839c-4f5f-9b68-5c2067f7f668 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-zh4wq authentication.kubernetes.io/pod-uid: - 20a4c8a4-63bb-436b-bb44-a26b8f81a746 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: dea41e98-5890-41d4-b946-c94fd01077d4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:46:29Z" lastUpdateTime: "2026-09-16T18:46:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cn6bq" reason: AutoApproved status: "True" type: Approved