--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-01T22:22:27Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-01T22:22:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-01T22:22:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-01T22:22:37Z" name: system:openshift:openshift-monitoring-k7nc5 resourceVersion: "6787" uid: 8a64125e-11ad-45a7-a572-990f50f4a880 spec: extra: authentication.kubernetes.io/credential-id: - JTI=79da7f0b-cac1-4bcf-b52a-defe5e7a3738 authentication.kubernetes.io/node-name: - ip-10-0-141-148.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 71ac56ab-11d7-43e5-860f-14527106bdf5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-l4759 authentication.kubernetes.io/pod-uid: - 71d83910-eb9d-4178-b1c3-3fdf24524dea groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJORkFiL2pUODlrZlM1Q3RXUjhNUkU4c2c5NmhPR1JjVXRzVFFod2tkWU5KdHVrSG1adnUKSmZzM21Ja2w0UXZidkkxd0VwRWRRNlB2MlJ5dEtyYlVQMjZnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQo5bTJUeDE4TVVxV3J0MnRlZVQ5M3J6cFFhOUlZR1ZpdS9aaG5YdTZ3WDNNQ0lEL3RvOEo5cVgyM2wvdjd5a1ZPCmpjZGptMm5QdHBub1VMaFA4MkphNnJWZQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: d3d943b8-0dde-43e4-875e-4d964ee3429f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-01T22:22:27Z" lastUpdateTime: "2026-11-01T22:22:27Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-k7nc5" reason: AutoApproved status: "True" type: Approved