--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T13:14:20Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T13:14:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T13:14:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T13:14:20Z" name: system:openshift:openshift-monitoring-t5sg9 resourceVersion: "8390" uid: 80afa6cd-68de-48d1-9ace-0bf0343c4ae2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=7869ec3d-55fc-47a6-be47-54d2385ed86e authentication.kubernetes.io/node-name: - ip-10-0-141-234.ec2.internal authentication.kubernetes.io/node-uid: - 28ce692a-273a-4dd1-93a9-194d5e9f28e9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6667474d89-7qknj authentication.kubernetes.io/pod-uid: - 55e8eb8e-280c-46c9-bcfc-5d796a915163 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bc45425e-27b7-4358-a7dd-e72e329ec325 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T13:14:20Z" lastUpdateTime: "2026-04-16T13:14:20Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-t5sg9" reason: AutoApproved status: "True" type: Approved