--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T17:48:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T17:48:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T17:48:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T17:48:50Z" name: system:openshift:openshift-monitoring-6m55s resourceVersion: "8284" uid: 5ab18dbb-d806-49bf-a192-4e5731b14b5a spec: extra: authentication.kubernetes.io/credential-id: - JTI=c73628d0-4bb8-40cb-8660-2023b73314da authentication.kubernetes.io/node-name: - ip-10-0-132-129.ec2.internal authentication.kubernetes.io/node-uid: - 163cca9d-98ec-4319-81c2-bb5fcccd25fc authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-h46vj authentication.kubernetes.io/pod-uid: - 7113eae9-b984-425f-a04f-d975d5fff4d6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ea99c8e9-6d33-4a04-8eda-2d1e634ecd0d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T17:48:50Z" lastUpdateTime: "2026-07-13T17:48:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6m55s" reason: AutoApproved status: "True" type: Approved