--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:24:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T19:24:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:24:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T19:24:30Z" name: system:openshift:openshift-monitoring-64tb6 resourceVersion: "8215" uid: 7d92ee79-062b-4f44-9d06-3ecb7c39f38a spec: extra: authentication.kubernetes.io/credential-id: - JTI=18fe9609-7434-4c40-b7aa-db0bf08e446c authentication.kubernetes.io/node-name: - ip-10-0-134-25.ec2.internal authentication.kubernetes.io/node-uid: - 10dde338-a9aa-4b4a-aee5-b4e8a7ab96ad authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-cpc74 authentication.kubernetes.io/pod-uid: - 23a58980-1db2-41a9-8f73-92e54d52b062 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d0948f9c-db33-4794-828f-0d08327c00d4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRS1Y0S0k5SWp5WUo3WU5IdFBrR0UyakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ERXhPVEU1TXpCYUZ3MHlPREEyTXpBeE9URTVNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGK2RkQ1hKTFZWQ0IrRlk0ai9GQmJMNQorcXZUek1ScTRCR2xzNDdsTGJDT1lkZ3NsNGdVQkJwWUk0NkZHbmRjOXE0TkNESHR4aHQvWGpYSDlQa1k1cUNqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUxHMXpuY3Fod2JYOStRZU5GL3dUMEk2S2Y1MUdMVXF1ZFBzNApWU1JGRFhFMHJSM3dPRnM1UEdTTHhIUnEwVTJCVnlsdmJ6MUR2OTB3NnhuS1VaODFhakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXZxTkswVU45MDgzSXZ3R0ZsaEVZSFRaWUVDMVdJQmZLS2RvMEJYcWJBNCtXazRCbXBWeFUKTVFVVnBOZjFhdCs5TmVBbS85MXc3WURsQ2IrWC82aVVvV2hZU0xNaFNVNEM5djZxaGNOUFZ5RkpXRDh5Zy93bQpsS2k2NHpSQVZYZkhQYlcydUdrVkpNeXpFSDZwNUsyYzdiNkRFV244ZjZwejNNRmhCWkdWYUVueHIzM1NYK1hrCjNXM2xMZjJDZVM5QTFxZklDWHJlQmhKaDNFMllIaGNYenlydEhWaDlFT2ovMmdvb09ONEpuT0tDTzNSYVdEVnYKQW1TZDhkUktQdVZmODRLT2IrUWUvTlpXMW1TTW9PSmkzT2lqbGplbklCblVzaEp3RkEwK0pwUnpUQkdHZTFqSwpKVnlEanhRcWNlZE50cVozY0pHY2dPMW5DOWo3Ym5Td21nPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-01T19:24:30Z" lastUpdateTime: "2026-07-01T19:24:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-64tb6" reason: AutoApproved status: "True" type: Approved