--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T00:29:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-31T00:29:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-31T00:29:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T00:29:40Z" name: system:openshift:openshift-monitoring-t5h6n resourceVersion: "6746" uid: 61cb1148-e0f3-4b4c-b056-de58ed88e08c spec: extra: authentication.kubernetes.io/credential-id: - JTI=8e7ce0bc-c290-441c-9bc1-bae2b7534b78 authentication.kubernetes.io/node-name: - ip-10-0-143-252.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 6c0ff36a-9f69-4cfb-8984-83bc3bb4e25e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-zm5gt authentication.kubernetes.io/pod-uid: - 85891c17-d98b-4654-ba0c-744b0c23e723 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 344a8ce8-4025-47e3-ac0b-8b81a1b9b031 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T00:29:31Z" lastUpdateTime: "2026-10-31T00:29:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-t5h6n" reason: AutoApproved status: "True" type: Approved