--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T12:13:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T12:13:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T12:13:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T12:13:55Z" name: system:openshift:openshift-monitoring-bmfmp resourceVersion: "9467" uid: 6f31eae3-9f9a-489b-a42b-6e0a739c8050 spec: extra: authentication.kubernetes.io/credential-id: - JTI=1b2f2599-fbeb-4870-8049-f2b12407396a authentication.kubernetes.io/node-name: - ip-10-0-137-94.ec2.internal authentication.kubernetes.io/node-uid: - 4a3b7180-c1ce-40bb-b556-0b120d92aa04 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-ww6tn authentication.kubernetes.io/pod-uid: - 13f7ee1f-daae-4663-88e0-4be29a8927d8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b2021b90-c5ab-4662-a4e3-14d0a459152b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T12:13:55Z" lastUpdateTime: "2026-06-08T12:13:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bmfmp" reason: AutoApproved status: "True" type: Approved