--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T10:33:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-21T10:33:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T10:33:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-21T10:33:05Z" name: system:openshift:openshift-monitoring-9qmch resourceVersion: "8625" uid: a502cf56-8b7e-4cdc-8c44-6e23e7bb89d2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3fcb4717-985a-413d-b7ab-0c37bb2f217f authentication.kubernetes.io/node-name: - ip-10-0-140-254.ec2.internal authentication.kubernetes.io/node-uid: - b30b45c4-1972-4a2a-b6ff-7de77104556f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-jh4mw authentication.kubernetes.io/pod-uid: - a0b9e259-f4b1-4bd3-b191-fe08dbbd52c5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5da32dac-ab56-4a1f-bcf9-c3e8fe916794 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T10:33:05Z" lastUpdateTime: "2026-05-21T10:33:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9qmch" reason: AutoApproved status: "True" type: Approved