--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T08:01:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T08:01:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T08:01:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T08:01:30Z" name: system:openshift:openshift-monitoring-6qtz9 resourceVersion: "8292" uid: 64869687-0bfb-4982-8555-709da86f86f2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=bd4c21d0-9dc6-4d40-bc24-d7045fbf90ad authentication.kubernetes.io/node-name: - ip-10-0-135-15.ec2.internal authentication.kubernetes.io/node-uid: - 5b0cba7e-a43d-45ae-85e3-81402ad58ca1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-hx2h2 authentication.kubernetes.io/pod-uid: - 83729f8c-e75b-4c7d-a1c8-dd7ee8ff81f6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3fb74e2d-370e-4be5-b32f-4547515d1a90 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T08:01:30Z" lastUpdateTime: "2026-07-13T08:01:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6qtz9" reason: AutoApproved status: "True" type: Approved