--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T02:22:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T02:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T02:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T02:22:40Z" name: system:openshift:openshift-monitoring-ttvms resourceVersion: "9429" uid: 73793dcb-0827-4f4b-b465-7cd526037814 spec: extra: authentication.kubernetes.io/credential-id: - JTI=49d61c70-cc95-44c1-9db0-01c18cf98a01 authentication.kubernetes.io/node-name: - ip-10-0-141-229.ec2.internal authentication.kubernetes.io/node-uid: - 2ac25a9c-41f1-4ef4-8a5d-312f613aa71b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-t678z authentication.kubernetes.io/pod-uid: - a15d589e-a296-4ba9-83d9-2a8a74f8823e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 35d6d956-3dd1-4419-9c51-8146b2227303 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T02:22:40Z" lastUpdateTime: "2026-07-07T02:22:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ttvms" reason: AutoApproved status: "True" type: Approved