--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T07:41:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T07:41:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T07:41:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T07:41:05Z" name: system:openshift:openshift-monitoring-d7zdj resourceVersion: "8132" uid: ab043709-f818-4e5e-a1d4-e14c5a19ee93 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5a5254fe-e994-4961-9ed4-74a8a67ce29f authentication.kubernetes.io/node-name: - ip-10-0-138-90.ec2.internal authentication.kubernetes.io/node-uid: - 17353bfd-f6f5-41c5-b420-7fdd616c13b1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-7hdkj authentication.kubernetes.io/pod-uid: - 5282e539-f4ee-4040-b1d7-1243abed56e5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a9b1f2ac-980d-4260-9dd2-5119390ff54c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T07:41:05Z" lastUpdateTime: "2026-09-11T07:41:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-d7zdj" reason: AutoApproved status: "True" type: Approved