--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T20:35:35Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T20:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T20:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T20:35:35Z" name: system:openshift:openshift-monitoring-rjtsd resourceVersion: "8038" uid: 80a0c437-aeee-4b82-96b9-d654eed46f0b spec: extra: authentication.kubernetes.io/credential-id: - JTI=751b07bd-12ed-49b4-b0da-960302a16114 authentication.kubernetes.io/node-name: - ip-10-0-139-213.ec2.internal authentication.kubernetes.io/node-uid: - da0851b1-d880-4829-bbda-b75ed8d081ec authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-pwkc5 authentication.kubernetes.io/pod-uid: - 0a7191ac-f120-4f46-bc29-56d313606188 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cb9f54f5-7ab4-467c-a8f5-1e6b8db844b6 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T20:35:35Z" lastUpdateTime: "2026-07-21T20:35:35Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rjtsd" reason: AutoApproved status: "True" type: Approved