--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T13:19:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-08T13:19:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T13:19:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-08T13:19:31Z" name: system:openshift:openshift-monitoring-jfm6h resourceVersion: "9367" uid: b4eb6a56-05e3-49f6-b3ba-260e09f5690a spec: extra: authentication.kubernetes.io/credential-id: - JTI=9ea9843f-7503-4dd7-913b-ceee1f2ab206 authentication.kubernetes.io/node-name: - ip-10-0-137-66.ec2.internal authentication.kubernetes.io/node-uid: - e2eb25e3-ba85-478f-8d48-234fd7e805a8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-s657h authentication.kubernetes.io/pod-uid: - ba4b3c60-a06b-4af3-9d0a-e80226cae5ab groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJNQ1Irek5RTDZCb3dLN0NiWjJjK2UyanE4akh2aE1CdnFLLzlLZG0xWE9hd2tiaWt5TEMKYVlrYnRWTmorMEJ3amVKdnk3RmROUFF5R09nWVBLak4vYmFnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCQwpkVVNERmdZUTdMMDNSUUx1enorT3hPbFlyTkFyQklkTUNHb3dTL0V6RXdJaEFJR0s0VGFpNHhXOGtCM1JSMGZECk5tOTBsZnQzR3VNdnhhU1ljQzFCU3kvbQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 89e5a130-ad64-47a7-a7da-e96e871ebebf usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T13:19:31Z" lastUpdateTime: "2026-09-08T13:19:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jfm6h" reason: AutoApproved status: "True" type: Approved