--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T13:27:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T13:27:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T13:27:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T13:27:48Z" name: system:openshift:openshift-monitoring-cnszp resourceVersion: "8926" uid: 91633805-153b-49a7-95ac-1454a2d10b1e spec: extra: authentication.kubernetes.io/credential-id: - JTI=c9539e90-53e9-42b7-8429-49101d30ee33 authentication.kubernetes.io/node-name: - ip-10-0-129-84.ec2.internal authentication.kubernetes.io/node-uid: - 8f0e3d6c-a7a4-43c1-91dc-179712dc281a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-wdm7n authentication.kubernetes.io/pod-uid: - bbe27bd0-1d07-43fe-8bdc-11439590bbab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: dd65050c-c8e5-4452-82f4-2764c468d28b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T13:27:48Z" lastUpdateTime: "2026-09-09T13:27:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cnszp" reason: AutoApproved status: "True" type: Approved