--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-13T10:38:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-03-13T10:38:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-03-13T10:38:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-13T10:38:57Z" name: system:openshift:openshift-monitoring-8ltvm resourceVersion: "8571" uid: f5e8da75-263e-47d3-9d23-abee5fdd1a6d spec: extra: authentication.kubernetes.io/credential-id: - JTI=f98f8afb-7248-4c84-947f-5529c76da607 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - cb006092-fd40-4d71-84fb-f3ba8c313f97 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-674cbfbd9d-vk9qz authentication.kubernetes.io/pod-uid: - 4d5479f3-51ec-4b93-8188-21cdda44828d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d807134c-a41c-4e8b-9e9a-b9d9a83f1c41 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-03-13T10:38:50Z" lastUpdateTime: "2026-03-13T10:38:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8ltvm" reason: AutoApproved status: "True" type: Approved