--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T09:48:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T09:48:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T09:48:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T09:48:06Z" name: system:openshift:openshift-monitoring-cht58 resourceVersion: "7422" uid: bdcca082-38f1-44a0-97dd-694c3c79d645 spec: extra: authentication.kubernetes.io/credential-id: - JTI=47d6d4db-7e6e-4395-9c1a-e50d5f9da4f2 authentication.kubernetes.io/node-name: - ip-10-0-133-199.ec2.internal authentication.kubernetes.io/node-uid: - 9b4e1781-c8fc-40a9-8cf7-bfc556d10e96 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-tghbz authentication.kubernetes.io/pod-uid: - 49927a9a-2e6a-47cf-ac66-d6ef01f6681d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 99944f42-5505-41c6-b571-5ba81028939b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T09:48:06Z" lastUpdateTime: "2026-09-17T09:48:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cht58" reason: AutoApproved status: "True" type: Approved