--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T14:56:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-20T14:56:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-20T14:56:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T14:56:25Z" name: system:openshift:openshift-monitoring-w8nrk resourceVersion: "8020" uid: 092b6f04-900f-4c8f-a5ea-30c490523a2e spec: extra: authentication.kubernetes.io/credential-id: - JTI=ea80d27c-4ca4-452e-a09d-89c7c566a095 authentication.kubernetes.io/node-name: - ip-10-0-140-93.ec2.internal authentication.kubernetes.io/node-uid: - efb3ff41-3553-45ef-b471-56e057f1df08 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-bp8pr authentication.kubernetes.io/pod-uid: - abfd5746-0891-4e15-9237-6631a29b8009 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 926c71f0-e138-43be-bc3a-0462e07634fc usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T14:56:23Z" lastUpdateTime: "2026-04-20T14:56:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-w8nrk" reason: AutoApproved status: "True" type: Approved