--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T08:10:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-08T08:10:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-08T08:10:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T08:10:30Z" name: system:openshift:openshift-monitoring-v4kvs resourceVersion: "7894" uid: 46815592-cf04-452b-bf4d-726349d5a6b1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=95bc0880-7c8d-413e-ab88-b54ac100ec30 authentication.kubernetes.io/node-name: - ip-10-0-143-38.ec2.internal authentication.kubernetes.io/node-uid: - ec523045-eddf-48b6-aa97-bfe0f13c3af5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-5l2fj authentication.kubernetes.io/pod-uid: - 41f366ee-96fd-40eb-a44c-c2208e7b4351 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7bc73238-a215-4e05-ad91-f1479c287f41 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUFJBM0p5cDhSaTRzTG9yaE8yeGMwakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EZ3dPREExTXpCYUZ3MHlPREE1TURjd09EQTFNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJINEJNK0p5YVhVMmh4akd6V3ExdFA0bApUMXVUVndpTENDSjM2Qm0yTXR4MVM4b0ErQ1dySy82cm5taUJpMGZuaW5raFNwSjh2VUM3TjZGRkVZU1Q5bXFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTFCc1k2WWxwZUNuWFhld2lZOEYvMmg5OWZTeEdqMnpBQ0ZEZgpFbFBMSXo5djh4enJwVWZKaGs0RG1IbHdRRDFjSnNGeE4wWTRRcXFhM2VZeldQcnNaakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUtjWXh1M08zSnlPdEJlc1R2QzY5SUdjZmg5MnNHcWtzbGRGVlVuWWxmVkZ0STd3RDRzZmIKVVJtMFNnNXNPRkxydmk3aFR3WVI2ZkR3WWNTQkdMS251R3ZQcW80RjR3U2FKci9nQnBxVExVNUV4dGw2SDR3dgo1Mmo1OFF2MkJwKy9NQ3QvVVRSVzVGN2djRW1QT0VDTnBKZHFWY1N4SEcwTkRqdlFJWWFyNk5ta0VHdE02RXBNCmxNVmYxT1gyaTYxa09NMmwwRDJaSGx0K3E0ZWZlMWlPemE2dFM3YVVVS3BQaFhzd296eTlOenZYREJwL2IwMWoKUWxnK3hRa2tlclFVdnh0STRmcTBLYURBanBrb21RdWZuSjhHZ3BTMlBIcldmSGxZclJ2MWhVZEMyODhlbDM1Ugp4cjBwVXBGVmpnL0tmbDVrbllXUFRlT2lucDVuTVMvMDhBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-08T08:10:26Z" lastUpdateTime: "2026-09-08T08:10:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-v4kvs" reason: AutoApproved status: "True" type: Approved