--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:01:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T19:01:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:01:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T19:01:50Z" name: system:openshift:openshift-monitoring-cfcbv resourceVersion: "7548" uid: 95ef422c-a16f-464c-bfee-c192f169cc30 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d36572b0-c6b8-4308-8e80-bf9168d8fb45 authentication.kubernetes.io/node-name: - ip-10-0-132-137.ec2.internal authentication.kubernetes.io/node-uid: - 6389588e-9c35-4525-8bcb-8a5a8afbce93 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-c9xc9 authentication.kubernetes.io/pod-uid: - 8f99222a-25d4-49e5-8f9e-61cb043f9982 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d2eeaa9b-951d-4a8d-8a93-34e5afb906ed usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T19:01:50Z" lastUpdateTime: "2026-07-01T19:01:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cfcbv" reason: AutoApproved status: "True" type: Approved