--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T19:54:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T19:54:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T19:54:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T19:54:51Z" name: system:openshift:openshift-monitoring-gj5zc resourceVersion: "7278" uid: 917be29d-81d0-4791-8697-10f63f8b04b0 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f340742b-fa13-4002-b059-00acbffa4fd3 authentication.kubernetes.io/node-name: - ip-10-0-128-201.ec2.internal authentication.kubernetes.io/node-uid: - 19021234-7d13-4017-b5a5-04dc31670b0e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-tpdvb authentication.kubernetes.io/pod-uid: - 0f95dfef-42c3-454a-9807-3c895a970729 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJHRkxEbUp0UUsrd2JSUUs0djhsTktpdU9iQkdUanRhQlBxVXM4KzJaTmhoR3Z6Z3RKZ3AKbit4OW4xRU8rZTQvWEs1bWF0c1JvYWFWZ1EwNi93V0ZxVk9nQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCNQpBRW95YVYxT2JQcmRuNG00MVdkTFhhM0NQQ25QYUlBSnZSYmpNekdOaWdJZ2JWRGJHK0pWb0lyT05jSFp0eUNGCnpxaXRjRVdEQVFkMFVLUG1lQjdmYVhjPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 6318fd30-79e4-4722-8243-af283d5e958f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T19:54:51Z" lastUpdateTime: "2026-04-16T19:54:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gj5zc" reason: AutoApproved status: "True" type: Approved