--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-01T08:32:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-01T08:32:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-01T08:32:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-01T08:32:30Z" name: system:openshift:openshift-monitoring-jbnmq resourceVersion: "7161" uid: 6c25a1ab-33a2-478c-8419-b9f3e51f3f63 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3ebe3121-379c-4c64-8ba7-5f5b8c470145 authentication.kubernetes.io/node-name: - ip-10-0-143-244.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - d3a88da2-88f5-449e-b536-fd96b19b09cc authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-bksj6 authentication.kubernetes.io/pod-uid: - f1f77890-a449-4958-9b83-ef93acbe2f58 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a8126920-2a72-4b5e-a80c-bc9bfa82dad9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-01T08:32:30Z" lastUpdateTime: "2026-11-01T08:32:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jbnmq" reason: AutoApproved status: "True" type: Approved