--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T19:50:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T19:50:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T19:50:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T19:50:18Z" name: system:openshift:openshift-monitoring-42dgs resourceVersion: "6897" uid: e8ac0908-1d3b-4810-b6e8-e946e9c6e10c spec: extra: authentication.kubernetes.io/credential-id: - JTI=87014265-e27e-48e3-b3f1-90b5442c4ea1 authentication.kubernetes.io/node-name: - ip-10-0-130-189.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 0f05e0ec-965c-42e6-858c-7d381a509715 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-6qssj authentication.kubernetes.io/pod-uid: - 9a8e848a-c61a-4aa1-b2d9-c32499ec9f6a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b1b59ee7-8fa6-4a93-87fe-258b6dceff5a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T19:50:06Z" lastUpdateTime: "2026-11-03T19:50:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-42dgs" reason: AutoApproved status: "True" type: Approved