--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:41:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T17:41:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:41:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T17:41:55Z" name: system:openshift:openshift-monitoring-8qxdq resourceVersion: "8484" uid: 529a9060-6229-47a2-9448-9e7ab2ede8b8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9fc85e11-596d-428c-8aea-a488f735ccc6 authentication.kubernetes.io/node-name: - ip-10-0-130-84.ec2.internal authentication.kubernetes.io/node-uid: - a2fef534-db4b-4be6-887a-bd950001c21f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-fx8qb authentication.kubernetes.io/pod-uid: - e81e5b8d-0807-48b8-8bf7-d31d799e2d40 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f16cd387-0e13-4629-8d5d-0dcdce6bfe58 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:41:55Z" lastUpdateTime: "2026-09-10T17:41:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8qxdq" reason: AutoApproved status: "True" type: Approved