--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T16:44:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T16:44:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T16:44:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T16:44:51Z" name: system:openshift:openshift-monitoring-6wsw8 resourceVersion: "8440" uid: 4fd68a8b-e58e-4b3f-b8ba-edbd47e4cc63 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d5ae466b-763d-478b-b041-b1affe41b49e authentication.kubernetes.io/node-name: - ip-10-0-140-142.ec2.internal authentication.kubernetes.io/node-uid: - eb1204a8-98af-4922-9417-adab48328020 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-x986z authentication.kubernetes.io/pod-uid: - cdebcf8c-67a3-4113-873c-43895a0993ad groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b1adb75c-0ba1-4573-b847-7c099e853cd0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T16:44:51Z" lastUpdateTime: "2026-07-21T16:44:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6wsw8" reason: AutoApproved status: "True" type: Approved