--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T20:51:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T20:51:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T20:51:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T20:51:50Z" name: system:openshift:openshift-monitoring-lrxh6 resourceVersion: "8251" uid: 2e89e899-d280-40f0-81a1-d476830e7b1d spec: extra: authentication.kubernetes.io/credential-id: - JTI=08953834-f138-4f8a-953a-80f57c598036 authentication.kubernetes.io/node-name: - ip-10-0-131-164.ec2.internal authentication.kubernetes.io/node-uid: - 79515473-ede5-4741-a2d7-d8c7523b5a12 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-sng6r authentication.kubernetes.io/pod-uid: - a6d4b8c1-a7fa-4a0a-b025-4f7aca44b26e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJOSmFaalVRSW9BYUZxK1o4Mkp3dU8yZm1lTW9YRjRUS1hlWGxnTlkrMjliTDdTY1diSnYKaUVqdkdNWmpwRzh4Q0VWTzgxcGNReHgxVlB5dkF1T21JZFNnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBcApiR2V0UHdsOE1pRTY2MVNkT2VGM0taaStIdWxNVXlHcGF4SWZDS0RZM0FJZ050MWxialBLWit0cTFLNThHZUFSClVNRDc0Zng1N0x3bjZoakVXVHhRUFFVPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 6fd9749a-1fb7-4be0-a94b-9fa2e0fdbd73 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T20:51:50Z" lastUpdateTime: "2026-09-17T20:51:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lrxh6" reason: AutoApproved status: "True" type: Approved