--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T13:45:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T13:45:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T13:45:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T13:45:49Z" name: system:openshift:openshift-monitoring-ht5kx resourceVersion: "9410" uid: 1aa2162a-95bc-474e-b594-d283d38f939f spec: extra: authentication.kubernetes.io/credential-id: - JTI=14cb0e77-d9f7-401b-a393-f546ea669a6c authentication.kubernetes.io/node-name: - ip-10-0-129-137.ec2.internal authentication.kubernetes.io/node-uid: - dede9d7a-767c-426c-aca7-6d1f955e788d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-hh6n5 authentication.kubernetes.io/pod-uid: - e1aa144c-62a3-4795-912d-ec85b8e05414 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ddea51a5-ed6e-4827-af31-7c51b8182807 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T13:45:49Z" lastUpdateTime: "2026-06-08T13:45:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ht5kx" reason: AutoApproved status: "True" type: Approved