--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T10:08:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T10:08:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T10:08:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T10:08:50Z" name: system:openshift:openshift-monitoring-djzhr resourceVersion: "8270" uid: 5cbde5c6-f4c4-42ec-b808-68a5a6f78279 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d6111316-baef-4002-aab7-9113fc3e5794 authentication.kubernetes.io/node-name: - ip-10-0-135-126.ec2.internal authentication.kubernetes.io/node-uid: - 5e3dfa1f-9e9d-415c-834e-a87e54bd3f06 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-s6m87 authentication.kubernetes.io/pod-uid: - fcdc3068-bf6d-437d-9b29-1210b9eb6bd6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 246679dd-80cb-49a6-b229-e710a142ad04 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T10:08:50Z" lastUpdateTime: "2026-07-28T10:08:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-djzhr" reason: AutoApproved status: "True" type: Approved