--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T16:36:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-03T16:36:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T16:36:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-03T16:36:23Z" name: system:openshift:openshift-monitoring-zfxch resourceVersion: "8463" uid: db573f32-5c06-4f58-a308-6e46a6a43a28 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6f3f1a6e-4d3f-457b-a567-43c42ec079b3 authentication.kubernetes.io/node-name: - ip-10-0-135-67.ec2.internal authentication.kubernetes.io/node-uid: - b33f8d6d-58ca-4e69-b01f-d9ecd24d4da6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-tzxs6 authentication.kubernetes.io/pod-uid: - 48e00082-b030-48ac-aa35-9cb1ab31fae8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f70a381a-d5da-4b7a-b97f-e50f58aaffdf usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T16:36:23Z" lastUpdateTime: "2026-06-03T16:36:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zfxch" reason: AutoApproved status: "True" type: Approved