--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-27T17:05:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-27T17:05:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-27T17:05:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-27T17:05:47Z" name: system:openshift:openshift-monitoring-lhdgl resourceVersion: "8232" uid: 072a5910-60d6-4216-bb97-818257ba403e spec: extra: authentication.kubernetes.io/credential-id: - JTI=67666602-ade1-4288-93d3-a5630117a450 authentication.kubernetes.io/node-name: - ip-10-0-128-221.ec2.internal authentication.kubernetes.io/node-uid: - 5194cfc3-cf90-481e-a0be-600ec7b3117d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-mlgzx authentication.kubernetes.io/pod-uid: - 63840aad-e309-44f9-8897-fcae0dd8be42 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: fc4c9720-65ea-4d13-8136-4dcaf534c0f5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-27T17:05:47Z" lastUpdateTime: "2026-05-27T17:05:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lhdgl" reason: AutoApproved status: "True" type: Approved