--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T12:20:52Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T12:20:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T12:20:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T12:20:52Z" name: system:openshift:openshift-monitoring-bpm7d resourceVersion: "8449" uid: e676fd7e-c267-49c8-b760-c8ee0ac2b27c spec: extra: authentication.kubernetes.io/credential-id: - JTI=950baa87-11a6-4378-9333-979505da5dd6 authentication.kubernetes.io/node-name: - ip-10-0-133-152.ec2.internal authentication.kubernetes.io/node-uid: - 8a186158-c9d6-4782-8fc2-ac020614ddc1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-rc7bk authentication.kubernetes.io/pod-uid: - 0f9a503b-3e0d-4018-a745-aab35e92648f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cd1cefe6-b058-4869-95fb-9872fddeba36 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T12:20:52Z" lastUpdateTime: "2026-09-09T12:20:52Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bpm7d" reason: AutoApproved status: "True" type: Approved