--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T16:53:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T16:53:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T16:53:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T16:53:30Z" name: system:openshift:openshift-monitoring-t55qh resourceVersion: "7911" uid: 89a063f0-a1a6-4b27-b316-b2eb6772ee92 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e8e63ad7-a4d2-4a7b-a361-8d9881034321 authentication.kubernetes.io/node-name: - ip-10-0-138-150.ec2.internal authentication.kubernetes.io/node-uid: - 29a036fc-dfe2-4210-8871-2f0a45492fa6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-z4wmd authentication.kubernetes.io/pod-uid: - 2ff1f555-05c5-4756-990f-b186e63c67f4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1b822e77-0b43-4c5c-bcb1-16e025d5df23 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRV1ZuM2RxL1hQaVpmN0UwWCtXVk40ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UWXhOalE0TXpCYUZ3MHlPREEzTVRVeE5qUTRNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLa0lpd0dLeTc2Yk14VUF4R3NWMTBWNgp1T1VYOXhBcXhOWm1VTkdWb2p5T1RJcG9iYjhwMGUzeEV4bkNJKy9hTlV1czk1ckJ6ZkNycVRBS1RvdkdSaTJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVl1elNWMnFTZHd6aWJ4UEJqWnNzT0ZtWTJLMG02ZmpUdWh2dgpscFNIdHFDZk9sRHFBSzdydDJ2ZE41YkcrczVFVk01VHBvNGxZM3VBR1JscEhxenBKVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXJBQ2xPNDQyTVZuV3lOcXBySmJyTHVERFRzTGdPS0UxNkh1YURFZ3ZlQ0VGWEliaWdMaWoKbG1GY0FpK0FIOW5ZdmJHTmhSOGtwYWs4UitSNWs5Wll3dGYyem9vNjJjKzVtRktGY0g5dm42MWtlQTZ2cXVlUQpadWZ6RXdlb2hHbFp3UVdqM2lPcFkyNUdhQk5pNDU3UFJhaTFpZ0NwZ3JES3ppTURzRTNCUFl0MDdDU0Z1YThzCmVHeGNiS3FXekpBWUFyVE9SVFd4QksxalNTUmF0ejNZMXNmT3l6N01IZ1FuODNlUzY0T2U3MlZFVnlXekx3Zk8KTUNKVWtJbjZUUDNTSlBUbW1Ccjk2d1pVNVNmQmJNS2QvNzBCc3dSWWVvbmthSDVNVUpLbDhCVmFXdFpRbWdQVgpWN1NmaXl1WjluamdSczRocjFnamxpYXlST3RzWVh4b1l3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-16T16:53:25Z" lastUpdateTime: "2026-07-16T16:53:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-t55qh" reason: AutoApproved status: "True" type: Approved