--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T21:16:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T21:16:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T21:16:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T21:16:21Z" name: system:openshift:openshift-monitoring-6pqg9 resourceVersion: "8540" uid: 56d62030-5cd5-4dca-8e21-5045c6244f6a spec: extra: authentication.kubernetes.io/credential-id: - JTI=8232335c-76ad-4e5b-9900-4b011f492d3c authentication.kubernetes.io/node-name: - ip-10-0-140-162.ec2.internal authentication.kubernetes.io/node-uid: - 73af8e03-858b-4062-8da8-2337fb339326 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-5rdtx authentication.kubernetes.io/pod-uid: - 689dd5e0-863e-4f54-af4b-3c268bfe6351 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f960cb26-cf41-4fcf-99c0-b8588c1eb689 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T21:16:21Z" lastUpdateTime: "2026-07-24T21:16:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6pqg9" reason: AutoApproved status: "True" type: Approved