--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T15:00:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T15:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T15:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T15:00:17Z" name: system:openshift:openshift-monitoring-pz9bn resourceVersion: "8143" uid: 7b9b88b6-2cb7-4e02-bc23-e400174a1482 spec: extra: authentication.kubernetes.io/credential-id: - JTI=28097731-85a5-4fb3-ae61-8a786114d166 authentication.kubernetes.io/node-name: - ip-10-0-140-77.ec2.internal authentication.kubernetes.io/node-uid: - 2f4f41a1-e9c2-43fa-a6fe-f45fb799d89d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-wq5z5 authentication.kubernetes.io/pod-uid: - 848c9644-faa6-430e-8cc1-b8b3f451f7bd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVCtpQUdaTnFuY2Fsa0k2OFcwUWJEZWtOWXFSTHBiaW0wVnpNRmtTb1lFNXJwMXRHMHgKRHBSMld1WTZzckRtRUtKalV6VGhmcVUvcXVhNHVMVWN1cXlWb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSThzOHQrTTRnWUhYVURCWGtiOUxmczJjb3pjSmlybm1GSFVOZFMrdnhGaEFpRUErb1l4djNvdk0yRFhxTHlsCnhHOStzOHhLOGx3cUJJbnV0eTF2aFAzeU9POD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 51c4f386-dbcc-4aeb-ac97-31ceb47d2c9f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T15:00:17Z" lastUpdateTime: "2026-06-11T15:00:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pz9bn" reason: AutoApproved status: "True" type: Approved