--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:42:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:42:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:42:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:42:45Z" name: system:openshift:openshift-monitoring-8c56g resourceVersion: "8509" uid: 01836363-6acb-4a77-9610-d7d69fa6e291 spec: extra: authentication.kubernetes.io/credential-id: - JTI=667d4bab-61bb-4832-a53e-38f3795e0a8e authentication.kubernetes.io/node-name: - ip-10-0-130-28.ec2.internal authentication.kubernetes.io/node-uid: - eab11eac-55a3-45f8-97c7-9498edcbed72 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-zfl5t authentication.kubernetes.io/pod-uid: - ce06d6fb-bcd4-44c8-8cf6-c06972683f63 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJET2ZFY3RvRUFoaUFXczVWeVZ2K2FVcGVIb3g2c04yUnJGV2Zlbk1kWFUrcmM1NWkwdXAKOE13cmlEZkM3S2pZazVWenIzTFlpNkdSZUQxQ2F1VEp2aytnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQovZlhKWEZzMGNaRmZKd051L2o5dXBxYng1UllLdDJZVU56ekVyOHA0ZlU4Q0lHdWdHRVFWYWtLbkRnNXdCdnBHCkFVNmRnOEU0VFFINGFlbnVhN1dHdzNOSgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 22244689-f214-4c34-a44e-897702a26bc5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:42:45Z" lastUpdateTime: "2026-09-16T18:42:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8c56g" reason: AutoApproved status: "True" type: Approved