--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T14:27:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-24T14:27:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T14:27:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-24T14:27:09Z" name: system:openshift:openshift-monitoring-vrf7v resourceVersion: "8385" uid: ab5c0a9a-fa04-4b6a-b2ef-1db1b3c17d17 spec: extra: authentication.kubernetes.io/credential-id: - JTI=dc77b17b-fa41-475b-b3b9-98dfa9f9bb23 authentication.kubernetes.io/node-name: - ip-10-0-137-95.ec2.internal authentication.kubernetes.io/node-uid: - 5531d98d-653e-40d3-813b-1fad2cb61164 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-8jnpj authentication.kubernetes.io/pod-uid: - 75b83f1b-1fca-4a30-867f-a76c5b6bfe4f groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a87d3076-6743-4e13-90c3-8c44b279f599 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-24T14:27:09Z" lastUpdateTime: "2026-04-24T14:27:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vrf7v" reason: AutoApproved status: "True" type: Approved