--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T13:27:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T13:27:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T13:27:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T13:27:48Z" name: system:openshift:openshift-monitoring-rfz7x resourceVersion: "8929" uid: 2cbc3d84-be27-45d8-9aa5-8c6f1587de11 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c9539e90-53e9-42b7-8429-49101d30ee33 authentication.kubernetes.io/node-name: - ip-10-0-129-84.ec2.internal authentication.kubernetes.io/node-uid: - 8f0e3d6c-a7a4-43c1-91dc-179712dc281a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-wdm7n authentication.kubernetes.io/pod-uid: - bbe27bd0-1d07-43fe-8bdc-11439590bbab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: dd65050c-c8e5-4452-82f4-2764c468d28b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T13:27:48Z" lastUpdateTime: "2026-09-09T13:27:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rfz7x" reason: AutoApproved status: "True" type: Approved