--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:15:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T18:15:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T18:15:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:15:08Z" name: system:openshift:openshift-monitoring-5cw7g resourceVersion: "8132" uid: d3efd8e8-2a2f-407f-8602-d1bc2d2aaff7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3e44690d-7586-4728-a2f6-8b19261696db authentication.kubernetes.io/node-name: - ip-10-0-133-184.ec2.internal authentication.kubernetes.io/node-uid: - 0f7f580a-617b-4ed3-97d9-f52cec1b609e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-hqh29 authentication.kubernetes.io/pod-uid: - e6586a22-98d2-4219-9139-cd0c6bb4ce73 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a6a17e0d-e140-4437-9f3f-c05dea78d5a0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:15:02Z" lastUpdateTime: "2026-09-17T18:15:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5cw7g" reason: AutoApproved status: "True" type: Approved