--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T15:19:41Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T15:19:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T15:19:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T15:19:46Z" name: system:openshift:openshift-monitoring-hnxgv resourceVersion: "7979" uid: 0686c9e6-7d11-4169-b16b-80cc2bd8a75b spec: extra: authentication.kubernetes.io/credential-id: - JTI=dd208e19-09fc-478a-ab08-81b9f36598dc authentication.kubernetes.io/node-name: - ip-10-0-130-92.ec2.internal authentication.kubernetes.io/node-uid: - c3771039-9740-4170-9d0a-e38707e01126 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-n8pd7 authentication.kubernetes.io/pod-uid: - 4261f15f-644e-4914-8e45-1bfa8a2447d7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7596d6ac-fdfa-49c4-ba0a-3fc5c455d29e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T15:19:41Z" lastUpdateTime: "2026-04-17T15:19:41Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hnxgv" reason: AutoApproved status: "True" type: Approved