--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-01T08:32:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-01T08:32:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-01T08:32:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-01T08:32:30Z" name: system:openshift:openshift-monitoring-hhvfm resourceVersion: "7160" uid: acf95487-e772-40e0-b795-e533515aaae1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3ebe3121-379c-4c64-8ba7-5f5b8c470145 authentication.kubernetes.io/node-name: - ip-10-0-143-244.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - d3a88da2-88f5-449e-b536-fd96b19b09cc authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-bksj6 authentication.kubernetes.io/pod-uid: - f1f77890-a449-4958-9b83-ef93acbe2f58 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a8126920-2a72-4b5e-a80c-bc9bfa82dad9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-01T08:32:30Z" lastUpdateTime: "2026-11-01T08:32:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hhvfm" reason: AutoApproved status: "True" type: Approved