--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T15:05:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T15:05:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T15:05:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T15:05:03Z" name: system:openshift:openshift-monitoring-chmzw resourceVersion: "8288" uid: 0207012e-fb82-41df-9b34-5445ed968126 spec: extra: authentication.kubernetes.io/credential-id: - JTI=52319d7e-6aa7-4cbc-9cf1-644d90cacd19 authentication.kubernetes.io/node-name: - ip-10-0-140-64.ec2.internal authentication.kubernetes.io/node-uid: - 7ad8b124-1ebb-4b6b-99ec-246739341046 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-bvjhz authentication.kubernetes.io/pod-uid: - 1a5789ba-3f50-4976-91d4-9190c29f9c53 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6cda961f-03a4-40b5-a7e7-017905c19941 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T15:05:02Z" lastUpdateTime: "2026-06-11T15:05:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-chmzw" reason: AutoApproved status: "True" type: Approved