--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T15:00:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T15:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T15:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T15:00:17Z" name: system:openshift:openshift-monitoring-pn7m6 resourceVersion: "8145" uid: 432101b8-fa79-4f7a-b9c8-2661ea7bb83c spec: extra: authentication.kubernetes.io/credential-id: - JTI=28097731-85a5-4fb3-ae61-8a786114d166 authentication.kubernetes.io/node-name: - ip-10-0-140-77.ec2.internal authentication.kubernetes.io/node-uid: - 2f4f41a1-e9c2-43fa-a6fe-f45fb799d89d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-wq5z5 authentication.kubernetes.io/pod-uid: - 848c9644-faa6-430e-8cc1-b8b3f451f7bd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 51c4f386-dbcc-4aeb-ac97-31ceb47d2c9f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T15:00:17Z" lastUpdateTime: "2026-06-11T15:00:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pn7m6" reason: AutoApproved status: "True" type: Approved