--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:26:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T17:26:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:26:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T17:26:02Z" name: system:openshift:openshift-monitoring-h4zcg resourceVersion: "8290" uid: b4dfb2e4-b5e2-432f-b023-7e72a9674eb6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=76fd6ac6-1d65-4e92-a0f2-1f78babe680e authentication.kubernetes.io/node-name: - ip-10-0-131-138.ec2.internal authentication.kubernetes.io/node-uid: - 57cd3d44-db95-462b-a98f-07074e2eff5e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-p9qfk authentication.kubernetes.io/pod-uid: - ed305f05-d529-4541-8b6a-99335447658e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ec01f16b-38c6-4c43-8330-016aa95ce43b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:26:02Z" lastUpdateTime: "2026-09-10T17:26:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-h4zcg" reason: AutoApproved status: "True" type: Approved