--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T23:12:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T23:12:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T23:12:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T23:12:48Z" name: system:openshift:openshift-monitoring-xwqxp resourceVersion: "9231" uid: 73ae4307-5e35-429d-a82d-ba7d511abe41 spec: extra: authentication.kubernetes.io/credential-id: - JTI=70bcf1b1-30e1-4bc8-b3fd-ce49b1b71c76 authentication.kubernetes.io/node-name: - ip-10-0-143-228.ec2.internal authentication.kubernetes.io/node-uid: - ffffbbfa-2912-4c1c-9a7a-c2b777bb23c7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-q9l5r authentication.kubernetes.io/pod-uid: - b698db08-6f86-4c21-ac42-70e7eefba846 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 01eff09b-b142-46c8-80ee-93ad0220cd6a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T23:12:48Z" lastUpdateTime: "2026-09-09T23:12:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xwqxp" reason: AutoApproved status: "True" type: Approved