--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:41:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-17T17:41:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:41:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-17T17:41:54Z" name: system:openshift:openshift-monitoring-gg7kh resourceVersion: "8237" uid: 03e44dff-affa-4ce7-9b01-e28f1ba6694b spec: extra: authentication.kubernetes.io/credential-id: - JTI=8cf99eca-b3fb-411f-bd39-b4b81710ac4e authentication.kubernetes.io/node-name: - ip-10-0-131-182.ec2.internal authentication.kubernetes.io/node-uid: - d1686d1c-fc07-451d-a55d-86c0a407394b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-mz2v7 authentication.kubernetes.io/pod-uid: - 107343cc-2584-4c0c-97dd-005cba24da44 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJLQk8zR0hDcy8xUlNUWStsTGVNR2lrQ2FxeGtGMWZFRnBoU2hDZnc4cVhNVlliejU0dDQKRit2REZva0ZHV0Y5T21UMlBicmdIZkRNSlAwK3h2SmNWVXVnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCcgpmbjBwVmxPMHdrUnBVaDJDb2M4STQvVllJWURxK1hCcUlxbm9VVnM0RmdJaEFNMWw2VnAwUldFZ1YzQTMzR3U2ClY3RDdPUHBqUW5hVnAzVDNQbXhqLzRuMAotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: b587cb7f-1f71-4529-90f4-87c57bb0505a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:41:54Z" lastUpdateTime: "2026-09-17T17:41:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gg7kh" reason: AutoApproved status: "True" type: Approved