--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:36:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-21T15:36:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:36:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-21T15:36:24Z" name: system:openshift:openshift-monitoring-cp8w4 resourceVersion: "7709" uid: 12360678-b3c7-4ec9-a320-9f7752e4817f spec: extra: authentication.kubernetes.io/credential-id: - JTI=2814496e-b73a-406c-a9ce-932ac7fbb532 authentication.kubernetes.io/node-name: - ip-10-0-136-162.ec2.internal authentication.kubernetes.io/node-uid: - dc68e188-2a9d-45a8-8f39-7df42597a3c4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-ttq57 authentication.kubernetes.io/pod-uid: - f63638af-e18a-4727-b301-3061e1e187b2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 127d212e-15be-4505-ac18-c51b96aa053f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUxySGRyTlpkQXJKWEt0KzRqamx6Sm93RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXhNVFV6TVRJMFdoY05Namd3TkRJd01UVXpNVEkwV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUWQ1eHJKZ0gweE5zREliaHJrcUU2QQpycm55d0pZNktWcHQ4Y0Jpa0lOWENodi9GaWZUbjJGQy9xdmVrMjYzM05qS25iS2pMMHpsWHl6ZFFmdGR4VEZDCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFMYmhrY2VMbmtlSEEzSzJ1eGNTZ3hvQU5NVTJwbDRCZXJ4VgpRSmVreTNqSXVsZ3FTTE1DenZOOVRyK3d1MmJmS0dMZWNrODdNWEQ1dlpyYUg1VVhMeFV3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDYTd1VmwwTk9PQzlPVG15aW9PSEFQWFpkNVljcjJIeWFBU2I1STR5K25LOXlydlN5V2MKSHlsRmJXZXcreHpLL09Ma2lsMExtS2JhTmUzeUZqVkFGa3p1S3V4NXVqQy94Q1pBYndZUkdoYUlYMVI5K1V6cApxQXRiOXdpdC92TmxSZGE1SWJjWDZ3Y1UybUFsQTRpWE5JdXVhK3FObVUvV24zcGViczJVVVY4NkNTa2lJQlJNCit6NEdhQUl2cnNVbCtPckZVU3gvUmZPRmJCWGhSS0FOa3pybDFUbGtMMVA2VFJ0V1I1TXJRcDhUMDRYWWdNWlAKMmdUSG5KSUZVWk9qWldCc09wOE4zMUc2blhRRlV5Vk5yT1hyUXZ6eTVXT3AxR3I3d1VrODdpZWw1RG02TU4vUAorMjYvZFZrejJSbElId0I1WUJhZ25NVERFVURZT0RXUkxBST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-21T15:36:24Z" lastUpdateTime: "2026-04-21T15:36:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cp8w4" reason: AutoApproved status: "True" type: Approved