--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T20:54:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-28T20:54:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T20:54:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-28T20:54:33Z" name: system:openshift:openshift-monitoring-8cknz resourceVersion: "8224" uid: ab16195e-ae3b-441e-9039-c52e577ff9d0 spec: extra: authentication.kubernetes.io/credential-id: - JTI=367f3415-a1f9-46de-bc33-fcdc99fccd89 authentication.kubernetes.io/node-name: - ip-10-0-133-41.ec2.internal authentication.kubernetes.io/node-uid: - 5ca9d176-af61-4165-99e6-2fe16bd89425 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-lw5fb authentication.kubernetes.io/pod-uid: - 656e4bcb-2c8b-4200-b0cc-49c5aee32699 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJIUVVIc3JabWFWUHo5alNtSGlidlh5K1NoM0VGeE11WlZQd0MrWWgvZmVBKzMyVkF1YSsKMTFCRWJwMUlJc1d4WFV5aHNYWkpqSU5SVEJTSWJiMW9BdHlnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCUApMNWoyWjkrMTJGNnkvb0t1TkNIQzAzT29tR0s5b3ZSSGRCVDJxSlJVOFFJaEFMQXN4OFY0dHVVNWtPNWpQd2NWCjFseTBqM3FVWFA4d2l4RXdVZ2VaVnk1QQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 90ecfbae-e9f4-4035-9a2d-c7928e6fe611 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T20:54:33Z" lastUpdateTime: "2026-05-28T20:54:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8cknz" reason: AutoApproved status: "True" type: Approved