--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:44:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:44:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:44:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:44:50Z" name: system:openshift:openshift-monitoring-dfvmw resourceVersion: "8013" uid: 288ab434-421c-405b-afab-0d0b4b319990 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e6a97343-2d9a-4fb8-a52e-20c21f15fd75 authentication.kubernetes.io/node-name: - ip-10-0-129-235.ec2.internal authentication.kubernetes.io/node-uid: - 58bb1967-688f-42e2-b80b-5948af43ff66 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-2vxtp authentication.kubernetes.io/pod-uid: - 5b142240-81c6-4a8a-be54-2d3a26b22eb1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a5624de4-8479-4da0-ae92-d761e167d70d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:44:45Z" lastUpdateTime: "2026-09-16T18:44:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-dfvmw" reason: AutoApproved status: "True" type: Approved