--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T13:47:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T13:47:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T13:47:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T13:47:15Z" name: system:openshift:openshift-monitoring-4vc2g resourceVersion: "8213" uid: 17e8dd0a-8654-4e84-9b14-077a33f543c1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=32fba492-fd25-4cba-8b07-759cacfc1b39 authentication.kubernetes.io/node-name: - ip-10-0-133-48.ec2.internal authentication.kubernetes.io/node-uid: - 0788fe8a-c04a-400d-a862-9b57d66f7006 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-khkj6 authentication.kubernetes.io/pod-uid: - 903b4f1f-5f6e-46c1-9df1-d1adf2424f88 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f0d54a3b-2df3-4b6f-858a-44fe18a96051 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T13:47:15Z" lastUpdateTime: "2026-07-02T13:47:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4vc2g" reason: AutoApproved status: "True" type: Approved