--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:41:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:41:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:41:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:41:34Z" name: system:openshift:openshift-monitoring-4vdcw resourceVersion: "8179" uid: d5a485ad-ab1e-4144-b829-b910b6d7dd7b spec: extra: authentication.kubernetes.io/credential-id: - JTI=088ce8ba-8ced-4281-ad9b-4d1031f9f813 authentication.kubernetes.io/node-name: - ip-10-0-133-99.ec2.internal authentication.kubernetes.io/node-uid: - 5a36cc36-af08-47b3-8a59-f5ebe6e7d3cd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-sw7rj authentication.kubernetes.io/pod-uid: - 02248648-cbdf-4352-b6f7-c91ecd16ab6a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7e64e4ee-a7cc-4a24-8400-b8e862ec87cf usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:41:34Z" lastUpdateTime: "2026-09-16T18:41:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4vdcw" reason: AutoApproved status: "True" type: Approved