--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T08:56:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T08:56:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T08:56:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T08:56:34Z" name: system:openshift:openshift-monitoring-d9n2h resourceVersion: "8736" uid: 6e472c52-d33a-41a2-a25a-8246c8e84053 spec: extra: authentication.kubernetes.io/credential-id: - JTI=331334c0-da23-420f-9a35-15e6a7ada1f0 authentication.kubernetes.io/node-name: - ip-10-0-139-204.ec2.internal authentication.kubernetes.io/node-uid: - 45016917-3a90-4472-9a66-0d3cd2e3fa19 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-79v66 authentication.kubernetes.io/pod-uid: - db2ba42b-71fa-4cdc-90df-51c41ab32d4d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3829cfb1-9fbe-4c60-94bd-6e9c995c0b83 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T08:56:34Z" lastUpdateTime: "2026-09-18T08:56:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-d9n2h" reason: AutoApproved status: "True" type: Approved