--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T14:57:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-02T14:57:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T14:57:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-02T14:57:47Z" name: system:openshift:openshift-monitoring-kwmwt resourceVersion: "7027" uid: af7c16d4-9d72-413e-8a1c-7d6a683c42e7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3db36bde-39d0-4ccb-aa7f-038a417f9fc8 authentication.kubernetes.io/node-name: - ip-10-0-130-229.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - 1723615c-d9ab-4148-9739-3129dd6621a3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-w8df7 authentication.kubernetes.io/pod-uid: - 8e6e6852-e747-4869-aea2-5e0bbc44988f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 685e980a-8ca8-4df9-a6d5-61d0ac295c96 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T14:57:47Z" lastUpdateTime: "2026-11-02T14:57:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kwmwt" reason: AutoApproved status: "True" type: Approved