--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T01:58:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-15T01:58:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T01:58:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-15T01:58:55Z" name: system:openshift:openshift-monitoring-xl67f resourceVersion: "8535" uid: 0da9eed6-ba1d-4a95-a0dd-6256f8b51597 spec: extra: authentication.kubernetes.io/credential-id: - JTI=53b2a753-0a3c-4d60-ac5a-1422057494df authentication.kubernetes.io/node-name: - ip-10-0-131-155.ec2.internal authentication.kubernetes.io/node-uid: - 068effb0-0cb5-4473-a48a-386f9fa73956 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-f8cn5 authentication.kubernetes.io/pod-uid: - 112078ac-b1d2-467f-a25a-9013ee52311e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 85ed86d8-040a-4a49-a5f0-2390613f0a03 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T01:58:55Z" lastUpdateTime: "2026-06-15T01:58:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xl67f" reason: AutoApproved status: "True" type: Approved