--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T21:06:46Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T21:06:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T21:06:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T21:06:49Z" name: system:openshift:openshift-monitoring-9sdx8 resourceVersion: "7993" uid: 2e3d626c-aae0-4a07-8485-7036193f0e6f spec: extra: authentication.kubernetes.io/credential-id: - JTI=d632e121-ac99-462a-8904-ec4f7b27f0b0 authentication.kubernetes.io/node-name: - ip-10-0-129-37.ec2.internal authentication.kubernetes.io/node-uid: - c29e5ca9-f2fe-4497-89d1-fb349036ac62 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-kcrk4 authentication.kubernetes.io/pod-uid: - 44c9aacc-e9a0-4505-862e-e202bff49aab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUUNzTzZXeGZtL0plREVCQW5tTk15ZFhGeEN2NmZUeVVsbVJsWkgrbThYNng1NE5sWWIKWkJZZWYyMUtVdmxEeWczUWh6dkZiUnI5eUFHcnlxZnhyUXhub0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTTF6SUFVZ2RPdUV5bnNlYWlsNnVnSTVCUU9ZSXVuU2JyNThTWXRIbFlDWEFpRUF3bkF1aWNDTm1ma1BIdUpGClNIaFpPWkhNdXJmV3IvZmU4L2FLSk1CYXJVbz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: ca3963bb-e059-40c6-8d6d-f4347c4534df usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T21:06:47Z" lastUpdateTime: "2026-09-11T21:06:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9sdx8" reason: AutoApproved status: "True" type: Approved