--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:45:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T17:45:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:45:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T17:45:44Z" name: system:openshift:openshift-monitoring-75z6p resourceVersion: "8248" uid: 994393e5-7129-4057-b784-470a048dc31e spec: extra: authentication.kubernetes.io/credential-id: - JTI=fc5f73a1-1e51-4693-b941-e3eb149234ce authentication.kubernetes.io/node-name: - ip-10-0-128-211.ec2.internal authentication.kubernetes.io/node-uid: - d36ead32-d6c4-4b05-a2be-d4bbd3069232 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-xg5xh authentication.kubernetes.io/pod-uid: - 123c40f6-e2b6-437f-8b4e-9d503f9b4902 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVGFqZjJxbmE4a1NoMlM3T0FLVTd4QUFrS2lyeGhVdmVWNjAxNHFpSTRkNTM3SjBIVVoKcG44dllIbU1OVm81V0hhSUFJOXFIaGlUbWNOaW02T0UvV01ub0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSnZzb282MElYYXE4akxPNDNhbElpTkx5RDhTYm9oblpMSDgyRjVCVGNZZ0FpRUFncmlvKzZyZjZIeTFKaElwCmhDZGdZL2FkQXhNY09rQ1JQbWdOYXdyOWRCWT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 935dc5a8-df63-4887-a70b-75cd84ac87a3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTVFjNG1lNS8rUWlwQWdBdlhUQmxrakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UWXhOelF3TkRSYUZ3MHlPREE1TVRVeE56UXdORFJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJOcU4vYXFkcnlSS0haTHM0QXBUdkVBQwpRcUt2R0ZTOTVYclRYaXFJamgzbmZzblFkUm1tZnk5Z2VZdzFXamxZZG9nQWoyb2VHSk9adzJLYm80VDlZeWVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVBmNk44UWh3UllkVnRycmE3N1hNcWIxQldaT2lBcVF1Smh3bwp3alV0S2EwbG93dzQ4eEtKaFhaNGIvZjZ5U2lmaTlCQlN3VzZoYjBTRkpIbE5SODZzREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXNkckt0MFcrZGE5dGNmTTR6SW5GT1VvOGk4VjcwOFpSSzNzT3NRU2FFMm9sOXQ2RFN5d0oKQnh0QWhDRU9yall3Z3FHcGJaOEZIbGptQ25WVURrakdYcTVPU3h0QzNmTm05bmZiYnFRRXo1U3B3N1VtQXNRaApMQy80bHBxMFBwNDJTaVpBNDcwZ1N2YmhWVTAxQkVuWFZuQzhZVEpud0JSK01ucFJpK0Nmc3UxT1Jmdkp6TFc5CnM0Y0FXSEh0T2YybHp3WEtQSlo3SGxFTTRNWmVGSEZMVnJXcXppSUlyTUsxbjYrODNZYVp0emUrUlJWMFdWdmwKSk1iL295Q0krQU8yd1dzdkxHYzVUeHVqNHRHU3lMNklHdndrL3AyZWF1OVphelc2ZjBJOUdWQ2JqQlYwUkRTMQpuN1VKcWsrMG9hTWovNHYyQXl0c21rMEtIYmt5TzhiZHdBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T17:45:44Z" lastUpdateTime: "2026-09-16T17:45:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-75z6p" reason: AutoApproved status: "True" type: Approved