--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:48:07Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:48:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:48:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:48:07Z" name: system:openshift:openshift-monitoring-fmq47 resourceVersion: "8427" uid: 4db64905-b650-41ee-a647-a9e0b6fc6437 spec: extra: authentication.kubernetes.io/credential-id: - JTI=09912b47-6ff5-4ac3-be21-dcf5eed74fff authentication.kubernetes.io/node-name: - ip-10-0-134-125.ec2.internal authentication.kubernetes.io/node-uid: - 468932a4-718e-43b2-880a-004ea691544a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-hms5p authentication.kubernetes.io/pod-uid: - 4f1e811d-0e94-42b6-888c-3e2f1952434c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: aaf2eab7-8949-48de-a3b5-5cb8881033ab usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU84WlRKcjdlODRRYk5aTXcycVU1MjB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTJNVGcwTXpBM1doY05Namd3T1RFMU1UZzBNekEzV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUldrelczNTJVeWZyM25DNzBqNVEvSwpHM2h6bmx0NCtXNW9nMXE5cXBRR0prazRKa3ZaZzV2cmk2d0NBMmlXMnpwVEpKZUVxaGxDSytJYmpxK0xiTGJ4Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFDaDhGNzI4a08wcko4Z0huRXh0UEx0ZSt5czBpZzNiTDdFSwpIa1ZCcU9LMlE1bVBLUnhpZkZWdWZnaVc3elU1Q2ZyNlZ4bEk2RXdMZHVKdjI1eGZqMXd3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFBTDg3ZmttZXh0d0NPanpzQ2c4Smp3d04wbjhwcFRUejBDYTFIWWZxd0ZMTWVUdUI2a0gKeEgyTFBFb3VwbmFtUHVyN1lwWW1BSndMUFJMQTA1b1o1TGFsY0dQcGs2K3FMK2s5L1Z0anlIOUZQbkpNUXlXcQo5T2N5Zk1jTGphR1JDWExBdktYSkp4U0k5R1h6YXlzQjBHVVhpWjd4SUYySXEvZkVVb3Irem5jTnlBMks3WHhjCkZvL2Ivb3VOQUY3Ui9PL1FFT004eSs4WTVOaGl3b0gvRDd6Lzltck9oQzRDS3lrYzNqQklwN1pyV0RDSUIwT1AKTnNsNTQ3TEJGQXNkWXkzOWhIN28vYlYrVEtqM0pwWmFPMlpndEthcTFkYkF3TUhiZVhYZjNiRy94NUlieENvVApvYmdHNlhObjg2a21YaXNaaVdvMHpoY2kyQWJNbVJGWHRyYz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T18:48:07Z" lastUpdateTime: "2026-09-16T18:48:07Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fmq47" reason: AutoApproved status: "True" type: Approved