--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T13:45:36Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T13:45:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T13:45:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T13:45:36Z" name: system:openshift:openshift-monitoring-np7gc resourceVersion: "8440" uid: 77746b14-5974-4360-8935-a43cb0cc47c3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=244a6f91-3685-4443-9af0-d2489461c662 authentication.kubernetes.io/node-name: - ip-10-0-141-222.ec2.internal authentication.kubernetes.io/node-uid: - 9ca48749-26c8-4049-82c8-6e9dcaca70e4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-7g9jh authentication.kubernetes.io/pod-uid: - 38fce007-dfca-4566-bea9-3e8c2ea32974 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 00ba618f-bad4-41af-b5b2-9d89bf42290b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T13:45:36Z" lastUpdateTime: "2026-09-18T13:45:36Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-np7gc" reason: AutoApproved status: "True" type: Approved