--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T12:48:41Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T12:48:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T12:48:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T12:48:53Z" name: system:openshift:openshift-monitoring-jnv9q resourceVersion: "8058" uid: 9c9a2624-b5ce-45d8-acc8-3e3c397f94e4 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d04182f4-f007-48ca-8069-6024214b869a authentication.kubernetes.io/node-name: - ip-10-0-136-21.ec2.internal authentication.kubernetes.io/node-uid: - 302dcd60-2365-44fc-940e-4dec8008fdde authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-fr49d authentication.kubernetes.io/pod-uid: - 73d957ac-833e-4def-a90a-0f720294def7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2e9bd0e9-dea9-42be-a1f9-949fb6b31dae usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUHppN3RJdWRMNXQ0UXF2SUpMNEltekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EWXhNalF6TlROYUZ3MHlPREEzTURVeE1qUXpOVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLN3o0V29YeGx3a3Zzb2VuVmgvV0FkRQorbWhlbEJRbmpuUnlNd0U5eHdlOFNZTVR5VnY4dUlnQkFvOTBwdXAyd0R4ekdPSWx0bkhiWDFvekVjNXRzeXFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXRZQ0dla3NXZnZFb2d6bVlpdjRLUUNIbE54VHhDOUdRQTlYMgo3REI2QjI0cmd5V3grVVBZaFdYTU01anlQeWNiZ0RCcXBUdHR6c1dxMjhSb2k1aHZnakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVZjN2FhbEhqK3VUdmg4cGluRzV1VFowTWttdnY2aU9tM3BkdEhNaWpvQldZZW80ckFHL08KSzdiQzUxYjVMa2NHb0t5Vk9kUjZmNnkvTlQ2QXlIeFJ3cCtMaUR2ckxGRk91VEsrV1JnOGVlcWtxcWpPUlUySgp5TzZVeG0yazhkVHRlRUxCUVVRRGVJV0piMEpacTg4dzdsMkVSMkhnRkJCM2liaHptTjVIYlQyMkFJQ2ZVVGF6CmJJQXp4eC83aTdmRWFwN1N6MGNPRHJ5a2xHVjVBcjQwUFkzd0VDVm1XSk5WR0g2bzJXQ2NsRVRkN2hvUG5pUXYKalRIRmJWTFliZTZPV0ZyVkdjRWtScFlJL3ZpdzB3MWJLYzlnYUJyY1Z6QzZuckJhbWR5TWFWRmFrZW5TeHhtQwp4akVCUTc2dnpiK1RjTGRnd0dTZlByQUY0YVdCNm1TalR3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-06T12:48:42Z" lastUpdateTime: "2026-07-06T12:48:42Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jnv9q" reason: AutoApproved status: "True" type: Approved