--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T22:16:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T22:16:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T22:16:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T22:16:30Z" name: system:openshift:openshift-monitoring-d8j9d resourceVersion: "8440" uid: e184b0a3-07a9-4f2e-87b9-05957c50ffbc spec: extra: authentication.kubernetes.io/credential-id: - JTI=4a388a9c-f021-4ed5-abbe-65f5c9589411 authentication.kubernetes.io/node-name: - ip-10-0-136-39.ec2.internal authentication.kubernetes.io/node-uid: - 41024aa7-e083-4d22-8be2-6bab85a2b09e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-5c4w2 authentication.kubernetes.io/pod-uid: - a242c550-213a-4a82-8bbb-01a37bbc13c5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b68827de-c3fc-4503-b12d-ff96f073e73b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUxmSkpJT1V2UGZtenVCb1RXUjJ4ckV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNakl4TVRNd1doY05Namd3TkRFMU1qSXhNVE13V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUXNmSTFhb3Jud1dHa0NRQU1Fcm5VbApIY09YanlKRkovcmt1cTdpNzA3N2J0bnVvdUNvRmV0dzYyYTIvT1dyVVpVaEtYVUMyZHRxL3V3Ym4zNUhlYnhrCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFQNlVxbUt6ZE9BUWRMODA3TEVmZWswN2xkSG1neEIrRklmLwpISHlPdlN1aGlLZlY0RWhjNTcvWXNQUFE1YkxQV002eEFtd3RZeXpoMFFtU3J6SVlydUl3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFCaEo0VFFFQnRtMi9lWUUzUkdpaU9uVWU4VGYvdnMyYUVsNFVOdXlPcVdldXVySStpdG4KdG9KRzV3enJjd3Rnd3cxNHlVOWhya0hlZk03aFJJY2lCVnpmMVI4eXZHVkZSUWE2UXBYVmZFTHlrUUhhL2tiQgp5S09rbkwrVGlsUE95cW9SRExHZ2J5Y1pYRjNsSUlsQmFUcEZGTzJJTGtwZCsyQ3kxemc4TjEwVzE0dFJBT1VrCnlZMHhsUHBTYitNSUxzdktLY0dra3krL0lkckd5M1hydU13eDdZb0c3U3NvclhMQThVY2s0dVUzYnJhNTBxbS8KamxLMzRCWGs2UkF6SkdWbU5oSkRoalRGdHdETFJhRmdRQllOeERSY0p2NFFvYlcyZEdPWXBkS1NOWlVDalNSeApNN3k2UlpIZmRJcDF5cnV2VktOKzFESDFITlRiZGNYUVljcz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-16T22:16:30Z" lastUpdateTime: "2026-04-16T22:16:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-d8j9d" reason: AutoApproved status: "True" type: Approved