--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T14:00:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T14:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T14:00:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T14:00:17Z" name: system:openshift:openshift-monitoring-v2fnf resourceVersion: "8440" uid: c65210b8-a62b-491d-a6b7-4a4c0f077252 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a40084de-dc6b-4b6d-9a42-11f1ce3e816e authentication.kubernetes.io/node-name: - ip-10-0-136-114.ec2.internal authentication.kubernetes.io/node-uid: - 34920db7-4fcd-464a-acf2-3b0293d1a655 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6667474d89-tj5v6 authentication.kubernetes.io/pod-uid: - 5b9fe9ed-1a79-4590-ad6e-74acb8e02aed groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a114b82d-7d21-40c4-bf72-2a3874688129 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU0vTk1hcXpPM2Z5VlQ3bE0xaW12OE13RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNVE0xTlRFM1doY05Namd3TkRFMU1UTTFOVEUzV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1BnUE9OeDhMa0E5NTh5OXRPZGZrWAo0YWlYMm5MSmZMU0pYS3pueGM3cDJPNXhYL0FJTGNnV1pQdUtzVnFHSXVqSkNpb241NWJUd0xxdkE1aEVsOVpsCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFBVTZUVXRsSHlUNkgySTdDMzNhdWxpd2hSU2w2NWx5UmRFTAo0SHJucFN3VmxvR3JvRXRHQTkwSElmSnJvVlI0ZmRWNmw1cXBDU0dWdjZ2anNiNTl0RFF3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFHNCt0NXBSYnJNdjdKdTBkS1luOWl1UEV0RzArYkpsbXNkQ1ZKOHZSUStOYnFEREZTUEQKc1dDSTRxczFFZFJZbVh6ZHptdVJVd2QwR2ZUdGoyZ3R2QjBteG8zQXAzaGxqQnRLNG1xWUhGSEdZVmJCT09HRQo4T3hyb3QvdFR6UXdyMWFKVm52VXVXQ0MyY1JabHBRVEI4Y2tYWVV6S1VKOHlKQkJwNFR1NVU0V2doWU1DaFRPCnZiLzFndE1yTm53Y3J6YUoxb2V0WUdKQkV1YWlEblRxeEl0SytseHA4TEFXQXYyVE14TnROc1Nzek5pQ1VHOXUKcEptcmEzcDM2U1hrQ3NHdEJKM1FxQlpQUU5aeEFqbDM0eGlNQjdLb0tTY0VkRkRkYjczTU5LTzlLTlE3azl3bwpJWHg5b2RwQ1dBOGhMeC83MWMxd2lxNUNyckJUb3JJMWhsUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-16T14:00:17Z" lastUpdateTime: "2026-04-16T14:00:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-v2fnf" reason: AutoApproved status: "True" type: Approved