--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-04T21:54:36Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-04T21:54:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-04T21:54:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-04T21:54:36Z" name: system:openshift:openshift-monitoring-rfghs resourceVersion: "8278" uid: 9aabe48c-7d7e-4dab-9b1e-119e650f47e6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=dd142588-a90d-4485-84d4-46fe0d7b1c50 authentication.kubernetes.io/node-name: - ip-10-0-128-61.ec2.internal authentication.kubernetes.io/node-uid: - b45e1015-61ba-4518-9265-5332800ad00b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-hs27z authentication.kubernetes.io/pod-uid: - 5b7e5697-f59b-4970-a58e-6f9bcb4b9a92 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e414b0ab-665c-4a1f-be78-7572eecb0c5f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-04T21:54:36Z" lastUpdateTime: "2026-09-04T21:54:36Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rfghs" reason: AutoApproved status: "True" type: Approved