--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T16:21:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T16:21:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T16:21:31Z" name: system:openshift:openshift-monitoring-f5pt4 resourceVersion: "7967" uid: 29fbe8f1-aaab-41f4-b4b7-0d62f6f433ed spec: extra: authentication.kubernetes.io/credential-id: - JTI=c98d0d98-d37d-4f96-92e9-7ccba15462be authentication.kubernetes.io/node-name: - ip-10-0-141-249.ec2.internal authentication.kubernetes.io/node-uid: - 17f32519-05d6-46bc-914a-6bd1d83e611d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-45hlv authentication.kubernetes.io/pod-uid: - ac52feb7-5571-46df-9d9c-4da8a7fd2a4d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4f7ac1cd-8464-4427-9fc8-57b3d7735c02 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T16:21:30Z" lastUpdateTime: "2026-07-28T16:21:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-f5pt4" reason: AutoApproved status: "True" type: Approved