--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:27:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-21T17:27:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:27:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-21T17:27:09Z" name: system:openshift:openshift-monitoring-k8nk5 resourceVersion: "8258" uid: 8658fa4c-65e6-44c9-a0d7-e3ff6f8bc9e1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=ad03de00-49b3-412f-a12e-bffdb7102c8a authentication.kubernetes.io/node-name: - ip-10-0-136-21.ec2.internal authentication.kubernetes.io/node-uid: - 4ba4cfbc-85e5-4c2a-9eee-b7ddf5ea658d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-6zkxx authentication.kubernetes.io/pod-uid: - 43b7c64c-69ca-425e-a477-4b656b922d01 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b794ff28-2b4d-4521-aab3-0feb6801116e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:27:09Z" lastUpdateTime: "2026-07-21T17:27:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-k8nk5" reason: AutoApproved status: "True" type: Approved