--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T16:04:19Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-26T16:04:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T16:04:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-26T16:04:19Z" name: system:openshift:openshift-monitoring-ccnv2 resourceVersion: "8323" uid: 1091d46a-ab83-4ee9-b846-509a7a57028a spec: extra: authentication.kubernetes.io/credential-id: - JTI=67e62415-2516-49b6-9d99-b70493c906a5 authentication.kubernetes.io/node-name: - ip-10-0-136-75.ec2.internal authentication.kubernetes.io/node-uid: - 277a539f-63d1-4f71-8bbc-57a37710417a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-v25ql authentication.kubernetes.io/pod-uid: - bf911ae2-5283-4948-b79e-514b29f1ac43 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUnRCaXJ4bkJISlhDeXJtUUFsVHNTZFRBWkFuRkdJbFNLZitPRUUrUFcxMGRiT3RhWmQKb3FTVDhaekdSR09rSFpIdy9HMWFaSlk5N28reFlxczVJUFhTb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBT1NadkxCRU5tQWJTbTBUVTBCMitmcGRzK0dvQlhraHVteEdCUmJsQkhxaEFpRUF6MHhLcXJPK1F2YVpua3JvCjZDOVRPRmp6c1pMZmhjbXY2UERZZ3QyS2hqdz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 227df081-d585-4ecf-8117-a2d5c2bec076 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T16:04:19Z" lastUpdateTime: "2026-05-26T16:04:19Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ccnv2" reason: AutoApproved status: "True" type: Approved