--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T15:17:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T15:17:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T15:17:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T15:17:04Z" name: system:openshift:openshift-monitoring-hldl5 resourceVersion: "8243" uid: 735cfa9c-6c31-42a9-9bb0-2b57fcf5d462 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9a39ef48-f856-4638-81b0-4f5b5fcacda1 authentication.kubernetes.io/node-name: - ip-10-0-142-37.ec2.internal authentication.kubernetes.io/node-uid: - 8079d5d0-0d30-4826-abbf-41348d77414d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-pshjh authentication.kubernetes.io/pod-uid: - 46fdc592-4de9-4212-8a71-e84cb6d48862 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: fd5d72cf-f4f3-40af-b5ea-552805515520 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T15:17:04Z" lastUpdateTime: "2026-09-10T15:17:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hldl5" reason: AutoApproved status: "True" type: Approved