--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T16:02:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-31T16:02:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T16:02:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-31T16:02:54Z" name: system:openshift:openshift-monitoring-7j8b9 resourceVersion: "7117" uid: 696bd835-a279-4d8f-92c7-527a75fe6e12 spec: extra: authentication.kubernetes.io/credential-id: - JTI=1ed622a6-f7f5-4ac5-ab7f-2d6dac09a8c3 authentication.kubernetes.io/node-name: - ip-10-0-142-127.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - f253db34-638c-4510-9de1-db414e165bcc authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-kns59 authentication.kubernetes.io/pod-uid: - 4fa7d16a-1eba-4ab3-88f6-d6ae9c638122 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5ed541b2-911f-46ae-9b6d-b55912ab763f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRU0NaL0crcVNHL25ZbWhmNjdIekIwREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFd016RXhOVFUzTlRSYUZ3MHlPREV3TXpBeE5UVTNOVFJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLWGx3U3ZVQlpYaUtFUnM5RU52SzZUNAphTUVRVHA5cTd5bWVRSm4xWElIQzNWcjMyemx4VWRkRGFjMVVmeHU2VWp1YXcvemsyVHNUMUR5b3FVblVtWTZqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUkzd3RYVjZ1NzVxOGJZRVovWndKa0pmdXRGN2pqWG53a2xUQQpRWm80MHgxRTFMM09RdDM1Z3FUbFpnZWRwV1hZeXJEK1dnTEhIWVpYOFdFbmlsOTBxekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUlTTzJPSXdLUXhDcWFoWWRjUDFleUxacjA0Z3ZDMmNTR1JYQkFGR3VpYTJ4K21rMjU0VUIKSmU2MktQVHpwV1hQb3RUSk9DdWp1em5tODZUK1d2YW5BS0Z5ZGt1Y29UU01sandMSWNpLzVaVmdvWUErTFJ3ZQpoS0hoeUVnNUhBYWhsNFB6ZUxPRE5nUUFVOE85S3NTdWFKQllZR2JnUy94VmllNmp1YllXN2V4MmVLZEhWK2U0CjhzUU1JanVMY3JsZUNnM0NPNWZnUjk3NmRPMWhaR1BpbzJidy9NQnFVa3VFaGJSeVBGSExIY2RrRFF3UkFDZTAKR1QrbUJhaFZ0a3hpK3k4cTRHQXMyQzdXLzg0Uklrc1dmTTBHekdTT2ovT1NmZmUvWlRUc3BlZ3pmM1ByOHN2YwpVQVBWZkdxWWY5WUJWSVFDM0hiU0xJWDlRWldYdkRSa3J3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-10-31T16:02:54Z" lastUpdateTime: "2026-10-31T16:02:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7j8b9" reason: AutoApproved status: "True" type: Approved