--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:10:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T14:10:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:10:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T14:10:13Z" name: system:openshift:openshift-monitoring-2f6nw resourceVersion: "8345" uid: 69e188e4-c201-44bc-9d09-769c34c05291 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cb076a94-6eaa-42cf-a241-251e75905d9c authentication.kubernetes.io/node-name: - ip-10-0-140-63.ec2.internal authentication.kubernetes.io/node-uid: - 5c282cf0-d5c2-4d96-952a-a18b7137b3c2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-xh927 authentication.kubernetes.io/pod-uid: - 6c7f79f8-ef15-4943-98a3-81a84d74c5bf groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ee28e843-1889-49a3-974c-dc5daf4e431a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRk1VUEJJL1k5aVYxaFFaTTJoNVBqVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016RXhOREExTVROYUZ3MHlPREEzTXpBeE5EQTFNVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJBWU9uMmRMV1lHZWVDYitFaTFMQzNlRwpUZ2hhdSs1WFBtRnl6cE4vRFU5Q0tqSWhZMk5vOHpVYUZMcHpocWRLRHpYdCtqV01pby9iZk5GUGJITVFNNHVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUl4R0R4NURxN1M1R2Z1K2RqOUNNdGN1WGtRTnV1RXdwTWUrQQp0Q2k5aDJHTlBXenpGaWpqUTBPUkc4Q2o5WmszR3lOcS9jSHRzNGtudDJvK09pVnh2akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWlQck51azJGekQrWnJSd1luNncrTzVtaWtKVW5uVzk1ZDBJcHVsZnZNdk1zYjdRNjQ3VEwKTWdMeE5ONzZJSmNiY3RrdU5XUjN0b1hvZ2Flb3hNREE0c1haWVJxL1RiSnh4SlBTNURhV3EyR3lFU0dxWWVQagpyRytINGFSdE9sUFFDdmlzaExabDZ0bUpTUFk1U05sSUVNdHdBVlhKcndkTUxnNmRXdVYxcUV5amRKUHY3bDYzCksvOEdydU42cVZsUGtyajdBSGZzOXN1b2Z0aGFVUjhkb0dmOWdDYUhJQXJhUHYzYW1IWTFjYi9jUVhOWHVQSFQKY2VWaFlQUDRRKzlVdUgzRFRlSVJKalpPR0NhQnF5dHJ1cDlBZUJ0VlZFTGhVbitmMElWbXJYZDM5SXE2dlRUaQo2N01rNkRLNEtoYzNKVnQyby9rOWFhaFA1cWIzVnRhWW93PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-31T14:10:13Z" lastUpdateTime: "2026-07-31T14:10:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2f6nw" reason: AutoApproved status: "True" type: Approved