--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T18:18:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T18:18:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T18:18:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T18:18:21Z" name: system:openshift:openshift-monitoring-6bqm6 resourceVersion: "8433" uid: d1257004-7669-4228-a386-33912f7b6384 spec: extra: authentication.kubernetes.io/credential-id: - JTI=67b9dbe4-1071-417a-924e-bac2b3a135c0 authentication.kubernetes.io/node-name: - ip-10-0-142-253.ec2.internal authentication.kubernetes.io/node-uid: - 254324b9-0348-4677-8e4f-a95523f37d33 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-jf6v4 authentication.kubernetes.io/pod-uid: - bab5ef01-e412-4447-a555-2913d63a81c6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 90ad047d-9497-4314-aef8-7f8a5ddb0721 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T18:18:21Z" lastUpdateTime: "2026-09-11T18:18:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6bqm6" reason: AutoApproved status: "True" type: Approved