--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T20:06:03Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T20:06:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T20:06:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T20:06:03Z" name: system:openshift:openshift-monitoring-pqtmj resourceVersion: "8089" uid: 2f0f0bde-f315-49bb-9553-0c9a27c8f595 spec: extra: authentication.kubernetes.io/credential-id: - JTI=b6f422c1-6404-4c3b-b415-0e7c0148c475 authentication.kubernetes.io/node-name: - ip-10-0-131-172.ec2.internal authentication.kubernetes.io/node-uid: - 5315de64-62e1-4cda-9a5e-f21b13ee4d0c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-fbvmc authentication.kubernetes.io/pod-uid: - eea67969-35bc-420e-a3e8-819b529619bf groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e44b4c27-ac25-426d-b745-360e6498927d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T20:06:03Z" lastUpdateTime: "2026-04-17T20:06:03Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pqtmj" reason: AutoApproved status: "True" type: Approved