--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T02:33:11Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-04T02:33:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T02:33:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-04T02:33:11Z" name: system:openshift:openshift-monitoring-8p6jx resourceVersion: "7257" uid: 917a0d9f-2f0c-4530-bda4-92da157dfd5c spec: extra: authentication.kubernetes.io/credential-id: - JTI=202ba4a9-59ea-4754-85ad-563525527232 authentication.kubernetes.io/node-name: - ip-10-0-133-209.us-west-1.compute.internal authentication.kubernetes.io/node-uid: - 51b9baed-a92b-4b6f-9c45-82ee580997e8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-tjjj9 authentication.kubernetes.io/pod-uid: - c6c9ee7b-40be-4ecd-8459-bda33ae4fa2f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5d214a38-d5f6-43b0-99d6-0d54a4ecb421 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQVBCMVR4czBLaDRCYmd0eEUyZVJQc0l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZeE1UQTBNREl5T0RFeFdoY05Namd4TVRBek1ESXlPREV4V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVEE5a2tWOW13TmNieVJ4d2ZHeXhTNApCWExLSGhZUGMyK3RnWkU1dU83anFoaVZJNW8xZEdHL3REUHMyNVhEY09DbmZBZ1Q4RjlSakdjQTloWlhXbmt2Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFKTVF6eDVuRnUrSklLOTVab0NKNFdjTUxLUlBibWlJQm91Ngo5eGU0NzZjWTFMY1pkTDMrRzc3Yk5VamxraEtnbmwyL2JEelprbXpXY1hhS3pKMjUvVmN3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFCMWVhUEFxSmREYWN4V0NZSTVhRWpnMzQzTGQ2YkoxQTBHNzhqZ2Y2MVl1WWFHTHNBOVkKYkc3WTJ2a01pSllPSStxbEVEWnJycW53R0orVXVBdzJ0eGFERXVHNmVCb0pSeWF6TEJwVHMxbFlBNW5UM1hoUgpJdGdDMVBKSCszM0FIVnJ5RHZNbjNxMWxVeU1hVVZMdzd6SWlNMGI4WkR6YmU5U3lBMWFwdGdmZDY0bjdTSGRhCjhmalFtSjJtYTQ3ZXYzd3ptVitiU3k5WEo4czBRU0o0Ymd3d1Q3VE5CQTlCb1BvZUZSR3lLS1BoVnJ5QWxEU0gKS3prbkE0OU93ZTFJekFvYUZSN1FvWVNwbFNJenRkSWZpcDViVDVmOGhjY0NvY0w0UVdFZm5oMnBVVG55RlU5QwpmL0FGK3pCZzV4VG8waVRYM0dVcXRvNTFnNjU5OExES0M3WT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-04T02:33:11Z" lastUpdateTime: "2026-11-04T02:33:11Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8p6jx" reason: AutoApproved status: "True" type: Approved