--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T11:53:03Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T11:53:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T11:53:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T11:53:03Z" name: system:openshift:openshift-monitoring-xjf7x resourceVersion: "8317" uid: f306f455-d97f-4862-bfed-212936a1ca6c spec: extra: authentication.kubernetes.io/credential-id: - JTI=58bfed04-7cf3-4a72-a48f-df41711f5b6c authentication.kubernetes.io/node-name: - ip-10-0-138-111.ec2.internal authentication.kubernetes.io/node-uid: - b025e2aa-d659-4eb0-8b52-1eaf4c326b5e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-lwcvz authentication.kubernetes.io/pod-uid: - 4f66e97d-43ad-400a-8b2a-acc93a06e282 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c2c7aead-db57-4d7a-ac34-fdfadeda211e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T11:53:03Z" lastUpdateTime: "2026-09-11T11:53:03Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xjf7x" reason: AutoApproved status: "True" type: Approved