--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T21:51:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T21:51:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T21:51:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T21:51:24Z" name: system:openshift:openshift-monitoring-fmc2h resourceVersion: "7991" uid: 9a6add8b-63ae-4cde-8705-72dbcb4a592b spec: extra: authentication.kubernetes.io/credential-id: - JTI=933ab306-2762-4e19-a586-e136288d72e4 authentication.kubernetes.io/node-name: - ip-10-0-140-201.ec2.internal authentication.kubernetes.io/node-uid: - 871068cc-0129-411a-95c7-049f4c10ad7d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-llcmp authentication.kubernetes.io/pod-uid: - bd5b6c0b-6fa2-45d8-b386-d4c7a573751b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1cc7f333-bf78-4a47-a2ce-8927d42c2374 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T21:51:15Z" lastUpdateTime: "2026-07-16T21:51:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fmc2h" reason: AutoApproved status: "True" type: Approved