--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:04:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T18:04:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:04:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T18:04:25Z" name: system:openshift:openshift-monitoring-chn66 resourceVersion: "8404" uid: eb038fa5-e79e-40a2-84b9-24352f0da2e1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f41e10c1-b90a-4904-95ad-d78c4c220dae authentication.kubernetes.io/node-name: - ip-10-0-141-82.ec2.internal authentication.kubernetes.io/node-uid: - a7a05fd8-d2bd-4c61-8bae-f050067cded8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-v7s7l authentication.kubernetes.io/pod-uid: - 5073d86a-582f-4f04-ad5a-130ea337c439 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 78a85a9d-4a5a-46cd-ba27-e463a8ed48dd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:04:25Z" lastUpdateTime: "2026-07-09T18:04:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-chn66" reason: AutoApproved status: "True" type: Approved