--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T05:52:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-15T05:52:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T05:52:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-15T05:52:06Z" name: system:openshift:openshift-monitoring-snn2g resourceVersion: "9428" uid: 75b631f0-82fa-4351-86b8-45ab9ebdd171 spec: extra: authentication.kubernetes.io/credential-id: - JTI=336ce4ec-6906-4516-b253-e16c6c633e1f authentication.kubernetes.io/node-name: - ip-10-0-133-111.ec2.internal authentication.kubernetes.io/node-uid: - c47d3136-7722-476c-b992-7112fd800537 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-d45f6 authentication.kubernetes.io/pod-uid: - 0bde2cab-f15d-4308-b2e7-5c02547676a3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cbb5ed0e-1e32-45f4-8823-ff91737a2541 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T05:52:06Z" lastUpdateTime: "2026-06-15T05:52:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-snn2g" reason: AutoApproved status: "True" type: Approved