--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T18:12:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T18:12:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T18:12:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T18:12:55Z" name: system:openshift:openshift-monitoring-fg5bk resourceVersion: "8375" uid: 20639373-0cbe-4764-91bf-cdf7b57fafbc spec: extra: authentication.kubernetes.io/credential-id: - JTI=9e845bbd-d1ec-4da8-8961-0a447849dfe5 authentication.kubernetes.io/node-name: - ip-10-0-133-142.ec2.internal authentication.kubernetes.io/node-uid: - 11b6762f-d21f-46d7-b7ae-4c38a9c89697 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-kcr7m authentication.kubernetes.io/pod-uid: - ac6d7493-5df5-4aa0-8274-2bfb5f2d3b8a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f7f088e0-857f-4a06-b411-de885b625a9b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T18:12:55Z" lastUpdateTime: "2026-04-17T18:12:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fg5bk" reason: AutoApproved status: "True" type: Approved