--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T13:53:28Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-30T13:53:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-30T13:53:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T13:53:39Z" name: system:openshift:openshift-monitoring-7ltjr resourceVersion: "6829" uid: 104de4db-a183-4528-9c18-e1aab28aad86 spec: extra: authentication.kubernetes.io/credential-id: - JTI=be8ea8c8-dda1-4f01-b1b2-ab2c54abe2c8 authentication.kubernetes.io/node-name: - ip-10-0-142-58.ec2.internal authentication.kubernetes.io/node-uid: - 61027d54-bd16-4d64-afca-06a22b6984f5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-dfhcb authentication.kubernetes.io/pod-uid: - 2e060e29-7407-4a7a-bab8-a1afb8dfd478 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 34769f81-1bd7-432f-9243-3e357fd25d7a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUlEcVpyai93Z2o4dzNWZ0JEU1ZuSVV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZeE1ETXdNVE0wT0RNNVdoY05Namd4TURJNU1UTTBPRE01V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVC8ySGd1SU5mZmxudEJTR0Q3VkVhcgpVQm44dVRzbjFpeVE5LzNmT2tsa3FWa0JRNWZGcnRTaWRTbDhYZU4rNXU3YlFYQWlPR2JXWktiKzhVVm56VzVPCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFLYWZzR1RxeUw0a3dUaHJud3IxM3ZIeWFzd2h2bTRIZEZaOApUMEtFczdpM1NKK0VrY09VenRVcWQvWGtWREYwcHlQUFkveE1iZjlQa2Q1NmJaazJPdU13RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFBa0RsMC8rWUppZ3ZzOUV1TjVXZ0M3cy9ob20wMk1FMllLSlFxTWU1dy8veTljOXkySjAKdFVvSWU4VnhRN2pWQWdVRThQVXNudFIyR3k3aWtpVUdjZ2hTbHlrL3Rxb2xQdVRKMWpnTG9sVm02OHB2Qm1hagpPOFZrQmdybUtKTERiSzRUYlJYU01zRlR6cFhDZ1NFMnordXk0dGQyR1RvV3lnZUgzbjFLcFdoYW9JejhhSWxDCkNQKzBGa1RPTU5uK0doUVFXSG1TWDBHbmMwVmF4NWpxbVhyNU5ScUE5eWJ6bnJHWVFLNnhFR2hIM1hoa3ptTDEKN1N6cm5qTEpqZXIrVXhrMkhNNWdXZndnSndadDNyOHgySEFsc01RbDZMRnRRQXY0RzhkcGFhZHJTSVBDUHgvdQowQmkzT3FvVFdyaFp2b21UMzFLa1NLd2tzZEhHemlqMENQZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-10-30T13:53:28Z" lastUpdateTime: "2026-10-30T13:53:28Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7ltjr" reason: AutoApproved status: "True" type: Approved