--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-02-20T11:49:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-02-20T11:49:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-02-20T11:49:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-02-20T11:49:56Z" name: system:openshift:openshift-monitoring-hctsh resourceVersion: "6768" uid: 04255332-bc6e-49f5-bd69-24abcb1f015e spec: extra: authentication.kubernetes.io/credential-id: - JTI=9ae94885-3d5c-4c8e-a4c2-f30b7c0e8645 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - 51b0ed2f-7236-487a-afb3-d60cce1796f3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6bb6d78bf-5zl5l authentication.kubernetes.io/pod-uid: - 22bba1b3-587d-4802-b4ae-946827c3fa7a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 62d41703-fbe3-464d-a535-42aa8392f941 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-02-20T11:49:56Z" lastUpdateTime: "2026-02-20T11:49:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hctsh" reason: AutoApproved status: "True" type: Approved