--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T13:30:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-08T13:30:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-08T13:30:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T13:30:48Z" name: system:openshift:openshift-monitoring-dh9hh resourceVersion: "9340" uid: 509f9391-6988-41c8-9727-5f255f77b343 spec: extra: authentication.kubernetes.io/credential-id: - JTI=701bd458-57dc-472a-8c12-cd25d9b12787 authentication.kubernetes.io/node-name: - ip-10-0-129-230.ec2.internal authentication.kubernetes.io/node-uid: - 19cea363-f59f-4e3d-ae08-72aa7ad90685 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-j69xv authentication.kubernetes.io/pod-uid: - f24ddbfa-f5f9-48f2-8664-a591f3f2fd18 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1b6dc65a-8b76-4781-890d-6028539a6be3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T13:30:47Z" lastUpdateTime: "2026-09-08T13:30:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-dh9hh" reason: AutoApproved status: "True" type: Approved