--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:15:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T12:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T12:15:34Z" name: system:openshift:openshift-monitoring-pjrjt resourceVersion: "8243" uid: 702ecc9f-4851-49fc-b117-778fd94e85d7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2251672e-a8dd-4893-b52a-9927654d0198 authentication.kubernetes.io/node-name: - ip-10-0-140-239.ec2.internal authentication.kubernetes.io/node-uid: - 1f2d8f8f-6991-4a4b-b81c-83df4d638f28 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-lrk7z authentication.kubernetes.io/pod-uid: - d26cd9a3-d26f-4edd-b61e-face2237376e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ac327951-796c-4035-ae8e-0b581b56aba7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:15:34Z" lastUpdateTime: "2026-09-11T12:15:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pjrjt" reason: AutoApproved status: "True" type: Approved