--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:10:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T12:10:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T12:10:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:10:42Z" name: system:openshift:openshift-monitoring-xxtpx resourceVersion: "8116" uid: e41f0a73-6279-473d-b589-53fad99883ca spec: extra: authentication.kubernetes.io/credential-id: - JTI=1f64e8f9-2364-4a75-b314-9d27f1463951 authentication.kubernetes.io/node-name: - ip-10-0-130-59.ec2.internal authentication.kubernetes.io/node-uid: - 08f6b875-20ce-4b11-9e97-0bd4f5575f00 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-krbld authentication.kubernetes.io/pod-uid: - b0ec98c0-424b-4746-a9d9-ba63f1eb343b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 12757812-deb1-4d0e-b376-745310bf6901 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T12:10:40Z" lastUpdateTime: "2026-09-10T12:10:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xxtpx" reason: AutoApproved status: "True" type: Approved