--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-05T07:57:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-05T07:57:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-05T07:57:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-05T07:57:04Z" name: system:openshift:openshift-monitoring-jlx7r resourceVersion: "8313" uid: 2ff8d001-4365-4a1b-93e7-0cf3129276a2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d1fe1184-b877-4698-9c04-ba4ea3a1fe7c authentication.kubernetes.io/node-name: - ip-10-0-136-121.ec2.internal authentication.kubernetes.io/node-uid: - 73777c0b-f0ce-487a-b00a-4d4e3bdc6a6a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-mgj7s authentication.kubernetes.io/pod-uid: - d9c66726-9f09-4686-a72d-48cb78b3394d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c828adc6-a327-4e7b-ae9d-4f60c0661476 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-05T07:57:04Z" lastUpdateTime: "2026-07-05T07:57:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jlx7r" reason: AutoApproved status: "True" type: Approved