--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:24:53Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-07T16:24:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:24:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-07T16:24:53Z" name: system:openshift:openshift-monitoring-pmpk7 resourceVersion: "9302" uid: 63136a4e-78af-4c2d-ad53-90a6aecc1d5d spec: extra: authentication.kubernetes.io/credential-id: - JTI=f939a52f-36ab-4a22-8796-8dc74d237a38 authentication.kubernetes.io/node-name: - ip-10-0-130-212.ec2.internal authentication.kubernetes.io/node-uid: - 9a0edbe2-a068-4561-84a3-2f76374e8811 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-lqhqh authentication.kubernetes.io/pod-uid: - 53d87652-ec15-437a-a85a-26343327106c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 8c3f298a-42aa-407f-8308-83cdf8185c27 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T16:24:53Z" lastUpdateTime: "2026-09-07T16:24:53Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pmpk7" reason: AutoApproved status: "True" type: Approved