--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T10:30:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T10:30:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T10:30:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T10:30:35Z" name: system:openshift:openshift-monitoring-rtm64 resourceVersion: "9424" uid: 492674ec-d2cc-49c3-a558-bebeeb7c50bd spec: extra: authentication.kubernetes.io/credential-id: - JTI=039fc58c-9f1c-42a5-895b-5528d19e913e authentication.kubernetes.io/node-name: - ip-10-0-131-250.ec2.internal authentication.kubernetes.io/node-uid: - 4128cab7-cbb9-49b0-b877-9fbd2baa5cde authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-lm2ph authentication.kubernetes.io/pod-uid: - fd142694-acce-48c2-ba76-c2361de63250 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d0636f0a-84df-41e0-954f-20cb26786009 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T10:30:25Z" lastUpdateTime: "2026-09-09T10:30:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rtm64" reason: AutoApproved status: "True" type: Approved