--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-08T03:11:41Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-03-08T03:11:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-08T03:11:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-03-08T03:11:41Z" name: system:openshift:openshift-monitoring-czd79 resourceVersion: "6949" uid: ff922b03-22af-4c27-9667-43be75600254 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8bb040db-d001-4836-9dd6-5e3b3e8926f7 authentication.kubernetes.io/node-name: - master-0 authentication.kubernetes.io/node-uid: - e5825447-c87e-453a-9919-ced1c52a404c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-674cbfbd9d-hzlxx authentication.kubernetes.io/pod-uid: - ed56c17f-7e15-4776-80a6-3ef091307e89 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJHbDMrZ2tNV2FUUkFWaElkbUR6cWpzYTRKYUEwV0RzRjNpbGNnb0g1MC9WZjhRakxSYmUKUjdyaDY5QjFZbGp3aVBWbTV3Mm92NWFrMEd4UlNnNUdYL3lnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCSwpVK0R3QnNPaEVjTUFRc2hudXVVWm1POUxPN05nMTJybTlhYTZ1aE1KbGdJaEFKWjQ2TG1Idm9QNFJ1YUJEeWlNCmJ5dTVweXNhS2pEK3N2Z1NyNjhKVUQ1VwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 9d6040ba-1bb0-4c7b-af82-6eaf9196b6d7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-03-08T03:11:41Z" lastUpdateTime: "2026-03-08T03:11:41Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-czd79" reason: AutoApproved status: "True" type: Approved