--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T07:29:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-31T07:29:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T07:29:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-31T07:29:26Z" name: system:openshift:openshift-monitoring-v2fff resourceVersion: "7209" uid: cc4a0a4c-79a4-4a05-a4cb-d18ef44032a3 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f346547b-b04f-4d9a-8a35-87112f4e6529 authentication.kubernetes.io/node-name: - ip-10-0-139-83.us-west-1.compute.internal authentication.kubernetes.io/node-uid: - 50612cd5-5b65-4319-848f-0a9e6d4b942f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-6k8mn authentication.kubernetes.io/pod-uid: - 789f11d8-d951-4144-a589-a2bdbf6844e3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e71cfd39-bf40-4911-b509-20c4a900e357 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T07:29:26Z" lastUpdateTime: "2026-10-31T07:29:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-v2fff" reason: AutoApproved status: "True" type: Approved