--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T14:13:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-25T14:13:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T14:13:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-25T14:13:13Z" name: system:openshift:openshift-monitoring-fj6b5 resourceVersion: "8331" uid: a262a543-7a30-4c53-82da-09b05b484790 spec: extra: authentication.kubernetes.io/credential-id: - JTI=fdbc33e5-3938-4477-a993-32c5e1f86b93 authentication.kubernetes.io/node-name: - ip-10-0-142-75.ec2.internal authentication.kubernetes.io/node-uid: - cbe9b99c-c048-4138-8a4f-959cd7af99c6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-ccdzx authentication.kubernetes.io/pod-uid: - 910ec47b-ebf1-4438-b3dc-c8bb77964544 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUkl0WTFhREY2VVU3Ty9XdjgvMk85RzNDMVBSQy9sZWY4QXpzZzV2d3E0QUFqdGRNQ3QKSkZFSzVxVWJDMnk3bVpCUlY1bXlmd1lPSGIxTldIT0ZocmRLb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTW5Tb2phdGJQaEZqSzRoL1Q5aWplc1FaSkNBKzFHQUlFQWFWNU42bVNFUUFpRUF4WUZBZnBkNTBTVm9FL1I1Cnh4T3pmV2E2UTRRQVl6UWIybDFzenlMeGNITT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 5bc9ea43-3aaf-4065-8b99-9b0885f44910 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T14:13:13Z" lastUpdateTime: "2026-05-25T14:13:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fj6b5" reason: AutoApproved status: "True" type: Approved