--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T08:44:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T08:44:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T08:44:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T08:44:06Z" name: system:openshift:openshift-monitoring-hgv9m resourceVersion: "8153" uid: 9c2fa993-ea86-42e5-a269-7356160449c3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=09db239d-485d-4b96-87c3-e4adbede382d authentication.kubernetes.io/node-name: - ip-10-0-143-193.ec2.internal authentication.kubernetes.io/node-uid: - c925e32a-58f1-4875-b676-7ac694f6e1aa authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-gntxd authentication.kubernetes.io/pod-uid: - cdbd75ff-0e9a-4744-829d-c063e4d0645c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0911d93f-30b3-4bf0-81d6-6c0231e143a1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T08:44:06Z" lastUpdateTime: "2026-09-17T08:44:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hgv9m" reason: AutoApproved status: "True" type: Approved