--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T20:17:22Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T20:17:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T20:17:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T20:17:22Z" name: system:openshift:openshift-monitoring-ttrz5 resourceVersion: "9376" uid: 65250183-7ee3-43f7-89fb-a49896bf8e5d spec: extra: authentication.kubernetes.io/credential-id: - JTI=0af054bd-5b6b-4f2b-b16f-6e90074b685e authentication.kubernetes.io/node-name: - ip-10-0-140-147.ec2.internal authentication.kubernetes.io/node-uid: - 71fd5061-9ce5-4695-9838-32f41323b4fb authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-djmhn authentication.kubernetes.io/pod-uid: - bf09141a-03fe-4bbb-8a1a-ea35e6680caf groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVENRaEZrU3E3UGZlR09hMktIT3MyS0FldGI0Z3U4MFg2NmtPSHFLa0ZRellmUWE1ZlcKZWVzR3RsdWo2UjgrMWNTQTlabmFKMWR4Q3daeVdIakkza2ZSb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSzQrb3NudWEra0N4YlBsSlBsV2NlUFJRbllOOE5XT2hsSUFrd0lkeTU4L0FpRUFqMDNkZWUvYjcyUXBWbXYzCnM0VVIzdUZBUzdPb3RTNG9FdWRseWM3VlFrMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: d55e7275-c8b7-4b3b-8c9b-fa9c4356d171 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T20:17:22Z" lastUpdateTime: "2026-06-14T20:17:22Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ttrz5" reason: AutoApproved status: "True" type: Approved