--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T19:17:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T19:17:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T19:17:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T19:17:06Z" name: system:openshift:openshift-monitoring-5n6sk resourceVersion: "8724" uid: b66002c1-e58c-4cc1-93a4-11eeb69f0a74 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7a96a5f8-4718-4c68-a2b1-45875cee09a9 authentication.kubernetes.io/node-name: - ip-10-0-138-71.ec2.internal authentication.kubernetes.io/node-uid: - 9a8bc8ba-8c3c-48ac-afe3-275c35903533 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-j69hg authentication.kubernetes.io/pod-uid: - bc714527-42ce-4346-bfc8-3e782c031a63 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVGNEMGtSV2FHRmtnbXBXWlFlL2ZvUldXYzFsaTgxWTh0TmwrSFhTWVprWHg1emJVbkIKc3l6SjlFaWhJRXBkNE85MEZtZmxUNkRPZjB2U2swNFBzR0tib0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTjNYUitVZDNVTHpJYjNTbXVERTZ3TnBraFplUnpKNURDaDNvb3p3NmtZVEFpRUFzSnZDTi9aVlhKMDVWRWY5CkM2YlVSY3RRT01Da1ZVOHFsNzhoL3RvOWJHST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 37e57946-1c9a-43c2-af7e-ca0b8e5025c2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T19:17:06Z" lastUpdateTime: "2026-09-10T19:17:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5n6sk" reason: AutoApproved status: "True" type: Approved