--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T19:42:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T19:42:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T19:42:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T19:42:57Z" name: system:openshift:openshift-monitoring-rxd7f resourceVersion: "9307" uid: 0f459056-8c3a-4ae6-a4d8-22385ac3e83f spec: extra: authentication.kubernetes.io/credential-id: - JTI=778cec48-d920-466d-be53-458066c12274 authentication.kubernetes.io/node-name: - ip-10-0-143-198.ec2.internal authentication.kubernetes.io/node-uid: - 1ca5b82c-eb4f-4995-a3f3-196227bbf7bd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-nwq8p authentication.kubernetes.io/pod-uid: - a72572f6-da61-48e6-98cd-ab9d4478cd23 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 29c8c5c9-fc8f-4a7d-9610-73afead6a25d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T19:42:57Z" lastUpdateTime: "2026-09-18T19:42:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rxd7f" reason: AutoApproved status: "True" type: Approved