--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T17:13:52Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T17:13:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T17:13:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T17:13:52Z" name: system:openshift:openshift-monitoring-sh7nd resourceVersion: "8246" uid: 4d1fd568-9fac-4143-9a8a-0a29a2d72291 spec: extra: authentication.kubernetes.io/credential-id: - JTI=b900dfa0-367b-487f-95d3-d65a8256523a authentication.kubernetes.io/node-name: - ip-10-0-131-254.ec2.internal authentication.kubernetes.io/node-uid: - 18dc02dc-81a1-414e-8826-dd693712aeae authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-x5wkc authentication.kubernetes.io/pod-uid: - 74db607f-5584-430c-b53f-82aad6af2b76 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c1c5ecde-d958-4fba-adb7-7b34a5703aeb usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUw0enRsTWNhNjZ3THJlUC9NYWs2QzB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXhNVGN3T0RVeVdoY05Namd3TmpNd01UY3dPRFV5V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU2NtVk9LYWNDS3RsekNqZjBXMXJNdwo5ZGQvUE1xVjd1LzVLbnI5Uk5uQWt5dGRxTUJCNjhpVG9GM0J3bEErQTc3V21LS0NabDBvOTI4cWFVTTlhNzI3Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFHZEEyaWJMT3ZUZHRkZVhzd3RnT28zM0E4Y3k5Y0l4czV0bQp3bWdrVCtGYmdDd2pOcklHZGE3c3hSd2tCYnJ3RzdRMitlTDZsUERDdUZwT1BYUjJpdFl3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFGQmhhWWJiWU5TNVI2Q21HamhaL3NGTWVvR2pIZUtYTGp1Skk2NkVVTlFSSHBLdzZxZFUKZ2xHdWN3SHF5Q2xPdUV2K1MwYk1QbnQ1SWljQysyMWtRZ1M4TzBJeUN0cGtnY3RMUktBT0Z3WEU5eDdFcUx5agp2cnJidS9pSTNuWThFbjJQOUl1L3p4cXppVXNxWGhMREJnZFJaL1ZQRnllVGF3V25xYkV4b3VSSE9nOGRwZEhECjBNZlN5dDdqVGZZUzM5c3hTKzZObFFkclpxMVRSZnlLZFJBWTZMcStQOTdGWXpmOVZ4SFhoV1ZHZ29LVWdsSkwKWm84bzlMdmpyRnEyTm8zMjJpT2ErSDZqalNwcklWcHlZRGdQV0ZEVWZ4Wk5SYm81MjV3QUpzT0NxTjVZVXJENwpNeWgyZkF6Z3Frc3dlc01XZG5YR3ZpcFhMNDlTY0d5bG0raz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-01T17:13:52Z" lastUpdateTime: "2026-07-01T17:13:52Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sh7nd" reason: AutoApproved status: "True" type: Approved