--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T07:31:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-02T07:31:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T07:31:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-02T07:31:13Z" name: system:openshift:openshift-monitoring-q9jn2 resourceVersion: "8419" uid: 5cc2c55a-7a68-4730-b530-57c1c6e9ca4a spec: extra: authentication.kubernetes.io/credential-id: - JTI=f0574c3b-3685-4fce-b944-9dd53ad94ad7 authentication.kubernetes.io/node-name: - ip-10-0-131-193.ec2.internal authentication.kubernetes.io/node-uid: - b49f7131-3412-4ee2-9cac-4338fd5f460f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-2knzt authentication.kubernetes.io/pod-uid: - 9fc50181-078f-4cd3-8cf0-bf95633ba176 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e640b331-75e0-4e25-87ba-6245d4b51438 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T07:31:13Z" lastUpdateTime: "2026-06-02T07:31:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-q9jn2" reason: AutoApproved status: "True" type: Approved