--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T12:11:08Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-07T12:11:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T12:11:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-07T12:11:08Z" name: system:openshift:openshift-monitoring-vjcbh resourceVersion: "8152" uid: 42a14f70-be70-435a-86ef-24c3240bfc46 spec: extra: authentication.kubernetes.io/credential-id: - JTI=820e71ca-05f1-4ad3-af4d-321d3a5e5c66 authentication.kubernetes.io/node-name: - ip-10-0-133-190.ec2.internal authentication.kubernetes.io/node-uid: - 279019c4-8982-48e8-b400-e7dda4d38dfa authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-8tclq authentication.kubernetes.io/pod-uid: - f0e801c3-29d2-4551-afa1-cac8f60ab159 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJDUzV5UmQvaiszUzBNWTJBOXpaeTVvMkJHTVZkUGFIVWdrcWtQdTJkQktxZ2gyNTB2V3IKeGMySklkNXFmYjkwdEl6cEE4ZnAyNzhzb25rRkw5SFhSZ2lnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQp3MjRSVVlhYkJqUjRDdyswemM2eC8xbWFjazZIZzdYc0ZKOU54UUsrSm1RQ0lEeHh0R2FsOGNkZDQvMFVSRi9UCnEvN2tTM2ZQRitsWUphSUNya0FvaXcxRgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 40bd3437-9fb9-44cc-b1c7-0dcfed64052d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T12:11:08Z" lastUpdateTime: "2026-09-07T12:11:08Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vjcbh" reason: AutoApproved status: "True" type: Approved