--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T17:29:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T17:29:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T17:29:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T17:29:26Z" name: system:openshift:openshift-monitoring-2d5d4 resourceVersion: "8261" uid: e3840fa4-ed3a-4fc2-ac92-0f1b9e4de872 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e6247e6e-dbb7-4e27-90fe-221874573edf authentication.kubernetes.io/node-name: - ip-10-0-128-10.ec2.internal authentication.kubernetes.io/node-uid: - ec150ee7-0066-42f3-849c-e91f6fabeb0b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-slvmd authentication.kubernetes.io/pod-uid: - f1b5b3ed-1e6b-4227-97be-a1fb93e34339 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 26975fd6-f62f-4756-9f23-10761c9fcb4b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVWl2R3J4bkVybER4ZDVnNGdKbGlrakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qa3hOekkwTWpaYUZ3MHlPREEzTWpneE56STBNalphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQUXQxMVR3amsxYTNHSkQ3OHBaVXpvSwpoTS9qTis2eUZKQXZqUjZjQlYxYXIyZ3I4SmR0SnYvR3oreGp0NzJnQzVqYU43VUJnYWxRRWRGazRZc3BzV1NqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUFtaTZ3bDNzdVRxTFd2ZzVxL1doayt1aXBqRURaQjdrK0FwNQpLSjJxOURXaTI1L1JCSEFlTFN2cEQ4WTBzODJLaGZkZ3hQaXo1c3dUWmFXTlN6eEQrVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWNuY2U0R0tZdFV2WnA5ZzNST1RPVnQwZUxRYUdoVWNCZUlqTHMzRXRhamluam02YU55bVIKWlZzYlBja1ZCdlpzZGJ1YnNRNmNMRHd5NnZRbHNtR2QvRTUyVkdRWS9Kbi9QY3FlOFVWZHQxWWpuNXJkeEU0OQo0STVDdkk2MURvbHVrTUtmcGdvenFzTHRCWk45dERSbUJpUitjckxqRkx6N0dGeURqVmFicDFFYlBjRFdRblZoCklaZUxUWlNFSW5UcjV0SzdUOUdlTUNNQjBoSThyRE8yUm03KzFVZmVHdUVQdGk5WVRiMHRHbUxJb2VmRFVycEkKSjlNZkZ2MFZEUUdVRDd1TmljT0dSSEg0OHhTeUI2UGZMdXJOV1cxVzBwRXhhOVpkMG1xU1Z6K3prbzluRGFQTgpUUU5pbGU1YVpEVTBSenJhQ2hoQVVkSGZSQlVsSHIxRHFBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-29T17:29:26Z" lastUpdateTime: "2026-07-29T17:29:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2d5d4" reason: AutoApproved status: "True" type: Approved