--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T22:51:18Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T22:51:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T22:51:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T22:51:18Z" name: system:openshift:openshift-monitoring-plvgb resourceVersion: "9241" uid: 95604106-bf61-464c-abe0-6a5ca73c2b88 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e53d683d-9f06-4748-a705-881b69bb2b33 authentication.kubernetes.io/node-name: - ip-10-0-131-193.ec2.internal authentication.kubernetes.io/node-uid: - 0e4f8773-8018-4a45-85db-857574d065d3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-tg52h authentication.kubernetes.io/pod-uid: - 227b4dbc-e960-4432-b261-f7cf67a14aba groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 02f465de-e89a-4deb-8bb7-37c14828f6cf usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T22:51:18Z" lastUpdateTime: "2026-07-29T22:51:18Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-plvgb" reason: AutoApproved status: "True" type: Approved