--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T16:18:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T16:18:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T16:18:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T16:18:26Z" name: system:openshift:openshift-monitoring-kgfw6 resourceVersion: "8172" uid: ef2fe051-c700-4f48-a9b4-011718400c80 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e4957fa7-cca5-4c79-a227-61cf57cad01a authentication.kubernetes.io/node-name: - ip-10-0-142-248.ec2.internal authentication.kubernetes.io/node-uid: - 5fcde487-44ed-4c18-b6f5-e7357dad7404 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-2dmxt authentication.kubernetes.io/pod-uid: - ba15f5ca-5cac-48e7-9622-e3166bdc1dca groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUWdNMHNWWHF0SlcwU2dQcHlHOHpHd1lFS1dScEVzTzJUdnZZV2FiRytWOFdScmhzWG0KMnhKVndoYVlEM2NvWGdwZVl0VjBsTnNFWFlndUN0MXR4WEJ5b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSU04MFMvaUJETEt2bm9CcGZERGlPczd0WWNZbUZvZXNqUUR5bmhJNDlVK0FpRUF4U1cwRUhmTmlicklhNHZDClQ0dXF0cVBrNW1EaGFldWRqTkNCQkZ2d2pPbz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: c71795dc-186d-4c93-94ab-f013f259199a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRSFFISVBIK0VFZXk5d2RxbFd1U2s1REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1URXhOakV6TWpaYUZ3MHlPREE1TVRBeE5qRXpNalphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJDQXpTeFZlcTBsYlJLQStuSWJ6TWJCZwpRcFpHa1N3N1pPKzloWnBzYjVYeFpHdUd4ZWJiRWxYQ0ZwZ1BkeWhlQ2w1aTFYU1Uyd1JkaUM0SzNXM0ZjSEtqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVZZSG85andiem1LUTRiVzNSN3pTaW9XeUwwZklNR0sxOUZyOAozaFhoeXh2NkZxL1lJdys4TEhPSXhrcjFRa0tkUjBPWGRrZEhmSHRPVi9UbU41ZkZaekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWlidnlkWXBHSGc0VlZmK25Wa1IrbThLSWRYZkpLN2VwWFJTcmFwNkpjWUgrMk5KYkN1ZzQKbzlvY1FGblhxSGxveEpXYkFYR1djeVNyTFdFNGR2dzRDekJXRGlINHY5K3c4UFdiOHNLTmU2TU12b0phSlpiaQpBWU1oT29mWTJOcFdFeEZXamNkWFFZeGI0Z2FMRmErWVhWR3pLbXBsNzZRL3MzeSs2Y3NjUU43Z3M5U20rb3hsCnZxQVozTVN3UUdUUUs4OVFYVkZWUVp4N1FOeEF1VHZLdE0vKyt5WHdkRnhTdDNSL1VPT0c0enovVDU5RE5JUkwKeVVzRlA4OVpGdld2UHRRVDBIZlNPZEh2Y1AyM3d5V2Z0cUNkaVNwNkVTZzU0emdTbGxDR0l4V3dCZit1Z2R6UgowSWR2bjlYd2paMnhySUhKRFVIbm40MUpqbmZpalRFaU9BPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-11T16:18:26Z" lastUpdateTime: "2026-09-11T16:18:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kgfw6" reason: AutoApproved status: "True" type: Approved