--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-19T11:35:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-19T11:35:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-19T11:35:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-19T11:35:17Z" name: system:openshift:openshift-monitoring-n4wrs resourceVersion: "9124" uid: e9dda764-d140-42fd-8bee-2886096ac3d4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c3c70b3a-9c1b-4818-b49e-8a6ff1603f2b authentication.kubernetes.io/node-name: - ip-10-0-133-209.ec2.internal authentication.kubernetes.io/node-uid: - aebe7c7c-521b-4e75-a48f-7fa98ce7aa46 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-nll25 authentication.kubernetes.io/pod-uid: - 53ad775e-63df-4c3d-856d-f17723aed41e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVEpvSEE4cEdzTjAxb3VYclM2aHE1NDIrb1czekNsdGg5dDY2M1BJTEI1R2VoaEVhYVIKV0JOckdobzVGLzFLclpienpDZVlFcGJ6K09pdVRrMHozbks3b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSjV6K0lDdlgxMnVyR0lYSVliZmlEZDlnREZKZUJSb1ladGFWbFY4QXFwWUFpRUF3VU1vWitsRUpJMjJZWll4CmRwYUV5UUNSSnRqYnVjd0Z0RHdoeU9oZ1A0ST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 528cce95-55f8-421e-b0f4-32f327146562 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-19T11:35:17Z" lastUpdateTime: "2026-09-19T11:35:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-n4wrs" reason: AutoApproved status: "True" type: Approved