--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T15:36:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-22T15:36:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-22T15:36:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T15:36:31Z" name: system:openshift:openshift-monitoring-tbz55 resourceVersion: "7801" uid: 5cdaf7d1-5938-4a5d-a927-0997eb7f6ba2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5730fa3c-e240-4f52-877a-8600ef4817c6 authentication.kubernetes.io/node-name: - ip-10-0-130-86.ec2.internal authentication.kubernetes.io/node-uid: - db542b0d-94df-4dff-ac46-6961aa03d9f5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-qdtnd authentication.kubernetes.io/pod-uid: - 7d4bedbf-e56a-428e-be2d-5f1a5111951f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f3bdbc5d-c1a5-4ddf-a515-6022ec0d9f4f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T15:36:29Z" lastUpdateTime: "2026-04-22T15:36:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tbz55" reason: AutoApproved status: "True" type: Approved