--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T04:26:08Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T04:26:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T04:26:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T04:26:08Z" name: system:openshift:openshift-monitoring-kn9m4 resourceVersion: "8092" uid: eaad29c4-65ca-42c3-adbf-cc03470d14e3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8ebec85c-df20-4ed1-946f-73523bee4c06 authentication.kubernetes.io/node-name: - ip-10-0-133-81.ec2.internal authentication.kubernetes.io/node-uid: - 29e27961-be7f-4bb1-a5da-4de596c531e1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6667474d89-chgzn authentication.kubernetes.io/pod-uid: - 7cfe1750-0b4e-43ab-b858-92eb84a5bd2a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ac511b5e-632d-4190-ae43-5aa002583655 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T04:26:08Z" lastUpdateTime: "2026-04-16T04:26:08Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kn9m4" reason: AutoApproved status: "True" type: Approved