--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T00:05:10Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T00:05:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T00:05:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T00:05:10Z" name: system:openshift:openshift-monitoring-mcj6x resourceVersion: "9457" uid: 91de5443-b765-4a53-9010-afa1b145e741 spec: extra: authentication.kubernetes.io/credential-id: - JTI=9bc1771d-2934-4c5d-8099-0f53c28398c7 authentication.kubernetes.io/node-name: - ip-10-0-138-70.ec2.internal authentication.kubernetes.io/node-uid: - c63995c6-8284-4385-9c89-09b88fe751c7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-rvjpt authentication.kubernetes.io/pod-uid: - de7084ea-54d2-42ad-bc19-89702fad376f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a3fded2b-aaef-421d-bb52-fc229a5a67ed usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T00:05:10Z" lastUpdateTime: "2026-06-11T00:05:10Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mcj6x" reason: AutoApproved status: "True" type: Approved