--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T00:57:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T00:57:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T00:57:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T00:57:41Z" name: system:openshift:openshift-monitoring-6w27c resourceVersion: "6670" uid: 30a05e7c-772d-47d1-9a98-198c9b87fcdd spec: extra: authentication.kubernetes.io/credential-id: - JTI=5f617a91-166f-43e1-9464-e37cfc1ecd04 authentication.kubernetes.io/node-name: - ip-10-0-131-227.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 3f33e5f3-e6e7-4130-a8d0-a335a4343b80 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-89jdv authentication.kubernetes.io/pod-uid: - 35fbbe37-38bf-404a-bc84-1eced2215cf8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 83d9bb46-5ef6-441f-b9e1-bbea13075e59 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T00:57:34Z" lastUpdateTime: "2026-11-03T00:57:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6w27c" reason: AutoApproved status: "True" type: Approved