--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T18:18:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T18:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T18:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T18:18:34Z" name: system:openshift:openshift-monitoring-2f5nk resourceVersion: "8223" uid: 977eecac-6740-47d0-97a4-d154eef0307b spec: extra: authentication.kubernetes.io/credential-id: - JTI=09dc816d-f94c-46e2-ad3f-10826a1a4d3e authentication.kubernetes.io/node-name: - ip-10-0-138-165.ec2.internal authentication.kubernetes.io/node-uid: - 3db7d88f-0386-44e3-abf5-960f5e64736d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-7d9zn authentication.kubernetes.io/pod-uid: - 516c07df-f9a7-48a7-8cd4-b992f37bfb44 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: df7216f0-e8df-42b4-bfe5-9c734e09ec62 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T18:18:34Z" lastUpdateTime: "2026-09-11T18:18:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2f5nk" reason: AutoApproved status: "True" type: Approved