--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T21:12:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-15T21:12:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-15T21:12:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T21:12:28Z" name: system:openshift:openshift-monitoring-5zsfw resourceVersion: "8135" uid: 9067500b-58a9-4e18-b7dc-9f2fe4ba7f93 spec: extra: authentication.kubernetes.io/credential-id: - JTI=24457210-9c48-4a3e-a773-83db0f16f32b authentication.kubernetes.io/node-name: - ip-10-0-139-184.ec2.internal authentication.kubernetes.io/node-uid: - 931a80ac-8b7a-4561-9347-d22e1bfce3a7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-mfp8r authentication.kubernetes.io/pod-uid: - 306fd13e-6e53-43f4-9903-e0a886c375e8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJCTmVjdWtkZmErcmVPVDF5cHZpb0JnVmx5eUlYQ3RGQXI4ZUpzOWx2RE91cU03VVBKWXEKcXIwRFBIaTFNc2oxYkFHc213aldSZHZZZlFFdTVMaW96MTZnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCRgpJRHZXL2QrRFlEeVJ4VXNqVm44Q2ZaSE44Uzl6U1BlSkVEdng2czlLYWdJZ2JicS9TT2VlUXBPQTRVWDVXWnRwCjZaL3BxcEtBcGtpTXpwTWtLMHFieGtnPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: ce767b98-79b8-4f71-a848-3bde4b4b8a9c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T21:12:21Z" lastUpdateTime: "2026-09-15T21:12:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5zsfw" reason: AutoApproved status: "True" type: Approved