--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T20:12:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-16T20:12:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T20:12:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-16T20:12:29Z" name: system:openshift:openshift-monitoring-2vs2v resourceVersion: "7486" uid: 9f9da0a0-48e9-4840-8da5-9b9844d363b5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c6e589e1-e45c-4f18-b86f-adb685d7b48d authentication.kubernetes.io/node-name: - ip-10-0-129-41.ec2.internal authentication.kubernetes.io/node-uid: - a3fa484c-047f-4cea-83a5-69179e4fdbbf authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-wndvm authentication.kubernetes.io/pod-uid: - dc063ce5-322d-48b4-9d08-1904d3210ecd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f3e9eadb-17fd-4c11-9005-a8faedc9735a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T20:12:29Z" lastUpdateTime: "2026-04-16T20:12:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2vs2v" reason: AutoApproved status: "True" type: Approved