--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:08:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T14:08:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:08:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T14:08:05Z" name: system:openshift:openshift-monitoring-xbbpd resourceVersion: "8457" uid: 79d718c2-7230-496b-ae57-e6e34a6bca43 spec: extra: authentication.kubernetes.io/credential-id: - JTI=105d58f5-c90e-43b4-91af-5e3001fe63c8 authentication.kubernetes.io/node-name: - ip-10-0-129-238.ec2.internal authentication.kubernetes.io/node-uid: - 5fc7b31b-d59d-436c-9526-9b729b5fe09b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-qh59n authentication.kubernetes.io/pod-uid: - cbd23749-ebc8-4693-b451-6ce8c5718793 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 37746aab-742e-4af6-8eec-9e750b10a2ed usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T14:08:05Z" lastUpdateTime: "2026-07-31T14:08:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xbbpd" reason: AutoApproved status: "True" type: Approved