--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T13:45:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T13:45:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T13:45:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T13:45:49Z" name: system:openshift:openshift-monitoring-nkhjt resourceVersion: "9408" uid: f893445b-9e76-4685-aa81-ef61c4f33f43 spec: extra: authentication.kubernetes.io/credential-id: - JTI=14cb0e77-d9f7-401b-a393-f546ea669a6c authentication.kubernetes.io/node-name: - ip-10-0-129-137.ec2.internal authentication.kubernetes.io/node-uid: - dede9d7a-767c-426c-aca7-6d1f955e788d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-hh6n5 authentication.kubernetes.io/pod-uid: - e1aa144c-62a3-4795-912d-ec85b8e05414 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ddea51a5-ed6e-4827-af31-7c51b8182807 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T13:45:49Z" lastUpdateTime: "2026-06-08T13:45:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nkhjt" reason: AutoApproved status: "True" type: Approved