--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T06:03:08Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-14T06:03:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T06:03:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-14T06:03:08Z" name: system:openshift:openshift-monitoring-992ws resourceVersion: "9489" uid: 098057fd-f8f1-4b26-a00d-e334a5ab3ddd spec: extra: authentication.kubernetes.io/credential-id: - JTI=4f865076-1e47-4fc1-9b79-5962eacbe84b authentication.kubernetes.io/node-name: - ip-10-0-140-231.ec2.internal authentication.kubernetes.io/node-uid: - d4c48f33-09c9-4866-9da7-6719875662d8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-rth6x authentication.kubernetes.io/pod-uid: - 268fd6e5-0bec-4a5b-af0c-9a547256d5b1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 60c2fb5e-4f5f-479a-a3d3-9e4d43e3cd6a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T06:03:08Z" lastUpdateTime: "2026-06-14T06:03:08Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-992ws" reason: AutoApproved status: "True" type: Approved