--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T12:41:20Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-10T12:41:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T12:41:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-10T12:41:20Z" name: system:openshift:openshift-monitoring-jpgss resourceVersion: "9568" uid: a5e1f4d2-1cd8-4e54-aca6-3215d72714c8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8c24fb9f-19d3-4d8e-b5bf-fac99cbf8ec2 authentication.kubernetes.io/node-name: - ip-10-0-130-175.ec2.internal authentication.kubernetes.io/node-uid: - ff772161-8767-4121-97f4-52b05b3b0587 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-dtdnb authentication.kubernetes.io/pod-uid: - 63fbc7e0-1975-4f2e-804e-c8994d736989 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: edf3bb0e-5ad1-4108-9274-e3dbbd48f10d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T12:41:20Z" lastUpdateTime: "2026-06-10T12:41:20Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jpgss" reason: AutoApproved status: "True" type: Approved