--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:36:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T12:36:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:36:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T12:36:21Z" name: system:openshift:openshift-monitoring-nv98l resourceVersion: "8556" uid: 69a13dc8-6183-4a93-8d47-93ddb3211866 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cbb6e536-c9a5-41a7-8113-71154feed6db authentication.kubernetes.io/node-name: - ip-10-0-137-92.ec2.internal authentication.kubernetes.io/node-uid: - b3ed6d1b-7cb2-4f54-9b40-55f0ec21d550 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-q9znf authentication.kubernetes.io/pod-uid: - d14de7a2-2981-41a0-b3c2-980fd5ba681b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5b631f63-73de-4c3b-9c7c-56593e332410 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T12:36:21Z" lastUpdateTime: "2026-07-28T12:36:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-nv98l" reason: AutoApproved status: "True" type: Approved