--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T10:12:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-07T10:12:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T10:12:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-07T10:12:39Z" name: system:openshift:openshift-monitoring-fgwxf resourceVersion: "8500" uid: 2ebfdc6e-8eea-4a6f-900f-0aa453f9e60b spec: extra: authentication.kubernetes.io/credential-id: - JTI=7e3c629d-b43f-4eac-a72d-9e659069f650 authentication.kubernetes.io/node-name: - ip-10-0-132-168.ec2.internal authentication.kubernetes.io/node-uid: - a74ec0e8-6dc9-40c6-ab0f-dfe5e93c05f8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-wzscw authentication.kubernetes.io/pod-uid: - 6c6b7ec1-a764-41f0-8541-a7b52c6989a2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7775e6d4-d895-411f-8e3e-46c1eff9d7c5 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRSlNRaXQ5RnZPeEtMTGg5dHc3ZExPREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EY3hNREEzTXpsYUZ3MHlPREE1TURZeE1EQTNNemxhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJNYjJTUmVXSUFscDE3bzR6MWlqcGZTcgpLRXJ3SlJ6RnFRb2FmUkxRVisybTZLUldTcVRJNHZQaGt1SjZIL3krL1NPZUVHSEVaUVQ4STUrdkVzMFkxd0dqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUVmaGQrZ2ZjclFVRUZtR2pBRDRnRDY2QkozZ2JNcXVTdHhPMgo2MDNIcWNzd0NEVDl0SUg0YmMxNGlvWGQ4cm9Eelh5TjJmNERxZS9lRWEwb3NJV0FFakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWNVUGlPTG1rbjZCTStZb2RqU0QzSVVOZnpQclYyS0U2aFJxVnZzeHE0SHN1c1dvYlgzZWkKSGl0dU02SGxrZ1BtOTNkd1VzVzI3cmhJT2hsdkloQzZlelVxdlZDYlVuditpTjErMjNsZEJ6U3BiQVJoV1hYUAowbURZcDhKeXhmKzBvK0Q0Zmh3RmR5U0NDWVp6R2ovZmpkVGJ1dGFsS3lDZGZtdGhHR2NnZ0l2QjNBQkZUb2NoCnFaY3hUdkY4eEkvdU9lMXZZb2c2eEFqRldTRCtHL2pxc1MzeXdKQ1FBUDBvRTU1TFZZZzJ3THpXcER2ZEhmclMKYjRpT3VoaUF6YWIyWmVVUXV2dVcrWEd4NEhRRk1iM3hnY011b1lFZjF6UU43eEE4T2hlSUZpajZad1UwV2dFaQpmWUNKeDN0WGdLZVNoeGp6dyt1NzU3aEZoOTBnSmluZHFBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-07T10:12:39Z" lastUpdateTime: "2026-09-07T10:12:39Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fgwxf" reason: AutoApproved status: "True" type: Approved