--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:59:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T22:59:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:59:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T22:59:47Z" name: system:openshift:openshift-monitoring-xlr45 resourceVersion: "8394" uid: bbdf162d-39be-4632-98bf-50e8e3b40921 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5ccd27d9-162e-4ee8-a751-07336f9b10f5 authentication.kubernetes.io/node-name: - ip-10-0-137-120.ec2.internal authentication.kubernetes.io/node-uid: - 3e44754d-b665-4e62-8c28-b947344f2538 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-nh5gm authentication.kubernetes.io/pod-uid: - 21d6b7ee-8dba-4987-996d-38cd4cf1f37a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 15213d93-f5e7-437c-b144-fffe9170476e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T22:59:47Z" lastUpdateTime: "2026-09-10T22:59:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xlr45" reason: AutoApproved status: "True" type: Approved