--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T01:12:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-26T01:12:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T01:12:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-26T01:12:57Z" name: system:openshift:openshift-monitoring-lmjlr resourceVersion: "8227" uid: 4d6b1401-7bc1-4851-ad6f-a138a139124f spec: extra: authentication.kubernetes.io/credential-id: - JTI=fd491c3e-95c3-48c3-8dc9-f394f63bb376 authentication.kubernetes.io/node-name: - ip-10-0-143-139.ec2.internal authentication.kubernetes.io/node-uid: - 609e83fe-ad85-46c9-99d3-17cd5c4bf04d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-qrcjb authentication.kubernetes.io/pod-uid: - 2740f4f5-893f-4bf1-91c1-03c8cf871110 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUUNrVTdxNzB1V3lCVys5VDUyTDdlQ2d5WDRIRGF6SFN4bVo4Z1QwZlBPcDdMRzNBZDYKM3JuZlV1Znp4TXV5YVhJaERJM210bnVTUHVLMWl1c2t4N2xqb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTDZma2lwTWZqbWMwYXhzeWh1UjI1L3dqb2pTVGdkV2N4amY4SGJwREZoSkFpRUFzQlQ1aHJYQjFqWnh0TE12Ck1OSUVnWWFnbWNKRXhtaEZSQUN5MVhUSk5WVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 902867f2-1ad7-416c-b99e-e1b0bdcde277 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T01:12:57Z" lastUpdateTime: "2026-05-26T01:12:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-lmjlr" reason: AutoApproved status: "True" type: Approved