--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T18:33:03Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-30T18:33:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-30T18:33:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T18:33:17Z" name: system:openshift:openshift-monitoring-s22vj resourceVersion: "6662" uid: 9ddb6850-da3c-4b67-9c9a-2c594a645ea6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6b4eb235-f110-4232-8a4b-2129fc9dfd10 authentication.kubernetes.io/node-name: - ip-10-0-131-155.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - f554312e-0e07-4f11-be68-aa2488d95c29 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-lf2ct authentication.kubernetes.io/pod-uid: - 263e2d58-6476-493e-9de0-319a8ed0c5f7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJPUnl6U3dBUTVPUWlHSVBzcWZyQ2JyMzBQOVIzdXE5bVBHY3RYS3dmVzZvQ3EzdW5SYzEKa3N3Vm9mbXVxUUlhZXpWaFlGbENSbTc3RDNOM2I1TVZJbGFnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBeApvaWpEbHFxYngzUTVERVhvM2o3ZDhZK1cwNzJKOWx5ZUR6alF2QVpTTVFJZ2NnKzUzMjVPN2I0czVkVUxtYzlxCnk0YzhEVmxZYWJuYlVzdGgxSTNWR3JRPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: e3b7ba31-bc52-4dc6-88be-37763d2013d4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T18:33:03Z" lastUpdateTime: "2026-10-30T18:33:03Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-s22vj" reason: AutoApproved status: "True" type: Approved