--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T12:49:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T12:49:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T12:49:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T12:49:40Z" name: system:openshift:openshift-monitoring-6458z resourceVersion: "8165" uid: 4450a29c-7252-4fbe-8680-84b6306b6d5a spec: extra: authentication.kubernetes.io/credential-id: - JTI=f3e8d96f-e227-4a28-b6cb-b4b3de18def2 authentication.kubernetes.io/node-name: - ip-10-0-137-26.ec2.internal authentication.kubernetes.io/node-uid: - 90d7df4b-5dde-4502-a820-88f168c47e02 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-qngjg authentication.kubernetes.io/pod-uid: - 6d40458f-6f54-4098-b0c4-11a5a069f6fc groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 70bb33b5-ed6a-4547-b1b7-fa0c2bb71dbe usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T12:49:40Z" lastUpdateTime: "2026-09-16T12:49:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6458z" reason: AutoApproved status: "True" type: Approved