--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T08:11:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T08:11:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T08:11:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T08:11:58Z" name: system:openshift:openshift-monitoring-7t6xq resourceVersion: "9606" uid: 4ec0c147-3ee4-44ba-ac56-0f5e588251ac spec: extra: authentication.kubernetes.io/credential-id: - JTI=e1cb984b-a330-40c0-8f50-830576e6334d authentication.kubernetes.io/node-name: - ip-10-0-132-210.ec2.internal authentication.kubernetes.io/node-uid: - 998d83ff-f5e6-4891-97cf-1a215e7aed9b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-s8b9f authentication.kubernetes.io/pod-uid: - 538eb557-c715-46d8-8ba2-7c3f4f17241a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 28ac5364-460a-47e2-9a5e-95698497548e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T08:11:58Z" lastUpdateTime: "2026-09-18T08:11:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7t6xq" reason: AutoApproved status: "True" type: Approved