--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-12T14:12:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-03-12T14:12:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-12T14:12:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-03-12T14:12:58Z" name: system:openshift:openshift-monitoring-lz5zt resourceVersion: "6839" uid: a3d5712a-ef82-441b-871f-f4161c978516 spec: extra: authentication.kubernetes.io/credential-id: - JTI=047f71f8-2935-4cd2-896f-ecba2d0f0270 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - a90b6cfe-c6a8-43ed-91fe-3b77c6c75fb3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-674cbfbd9d-6w5nv authentication.kubernetes.io/pod-uid: - 42dbcb8f-e8c4-413e-977d-40aa6df226aa groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKMVFiYUpIeVdJQlRxbExWcjNoMmo5d0lvZkxEMHZKYzJYcmJtWjV3ajBLZ2Eva1BVQWgKQjlmZ0tNdjFYRUttOERtUTd0RjRFcUdvN2FLV0xGV2RvOE9nQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCeAp0QlJzOWVQbWZOc0xyRmpKcjRZOG5kSnNuYWxqZk8rMklMblFWYlNvL0FJaEFOY1l2cXpFb3RRRW9KSWIvTVR6CkJwb1ZGbWFLWXQ5VTMzQ3pBNjAzdmk1aQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: cdd22fb6-2f69-426d-962d-83cabce74443 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-03-12T14:12:58Z" lastUpdateTime: "2026-03-12T14:12:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lz5zt" reason: AutoApproved status: "True" type: Approved