--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T18:20:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T18:20:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T18:20:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T18:20:31Z" name: system:openshift:openshift-monitoring-wgh4m resourceVersion: "8319" uid: 6b92a45f-63c2-465c-bb44-30d1d47272b2 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3dfdca52-c254-45f4-b55c-9e739e41f81c authentication.kubernetes.io/node-name: - ip-10-0-128-74.ec2.internal authentication.kubernetes.io/node-uid: - 926d2793-1365-483c-b06b-1d00737dafb7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6667474d89-s6xhl authentication.kubernetes.io/pod-uid: - ca4f330e-8728-4c07-ab6d-127e7f77538c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3ecfcd36-0b34-4b9f-a24d-89daf21910c9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T18:20:31Z" lastUpdateTime: "2026-04-16T18:20:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-wgh4m" reason: AutoApproved status: "True" type: Approved