--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-13T12:43:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-03-13T12:43:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-03-13T12:43:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-13T12:43:49Z" name: system:openshift:openshift-monitoring-8mbbq resourceVersion: "9680" uid: 37f19351-70c4-49aa-8b2d-3c1f74896920 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4ab22315-e315-40fb-a4cf-eb653c8e6f02 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - 0fa0cd06-0713-4d9c-bbbe-93031eeb0b8d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-674cbfbd9d-4jlnk authentication.kubernetes.io/pod-uid: - 71b741d4-3899-4d31-afd1-72f5a9321f75 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2fe09322-f8de-41e7-9fc6-e34a9f9835ea usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-03-13T12:43:24Z" lastUpdateTime: "2026-03-13T12:43:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8mbbq" reason: AutoApproved status: "True" type: Approved