--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T16:43:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T16:43:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T16:43:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T16:43:35Z" name: system:openshift:openshift-monitoring-lqwn5 resourceVersion: "7580" uid: 8668bee8-34b1-491a-9dd6-88574229aa20 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7035cc54-365a-48cc-bebb-161b70e79779 authentication.kubernetes.io/node-name: - ip-10-0-142-146.ec2.internal authentication.kubernetes.io/node-uid: - ed45f837-3584-44cd-8b03-3aa8132868e6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-6zz8j authentication.kubernetes.io/pod-uid: - e0d51f98-f18d-426d-a626-e068dc133c6d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: deb7e5ca-e7a5-4276-a2c2-8758238d07eb usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T16:43:30Z" lastUpdateTime: "2026-09-17T16:43:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lqwn5" reason: AutoApproved status: "True" type: Approved