--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-07T09:12:01Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-07T09:12:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-07T09:12:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-07T09:12:01Z" name: system:openshift:openshift-monitoring-kv4hj resourceVersion: "9309" uid: 77e9eb13-0a83-4b5a-a3ec-698814af0c75 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a0e8f83c-a335-45fc-a4f7-208fd25184c0 authentication.kubernetes.io/node-name: - ip-10-0-129-203.ec2.internal authentication.kubernetes.io/node-uid: - 8e702270-029f-4772-b8b2-bc9efd0251cf authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-kkw42 authentication.kubernetes.io/pod-uid: - a00eb047-24f1-4eb0-8a2d-cf79c57e4cd4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 57e5038a-e1d8-4812-a6a8-5583043df7d8 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRWXZFTVBQN0NzR3RlajBKRmp4T3ljekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1EY3dPVEEzTURGYUZ3MHlPREEyTURZd09UQTNNREZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJIOTMrR1RYbEJyTVVFVml6QURHYUE2eAoxay8rU0NYdTBvUnNhbzM4djBSQXBqSVhaajhzc2V4dlgrUU1RTUpDbU9QTmJzamgyUVdmV2ZVejhWRW55bnVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTFwSWNLZHVjWCs5NjRDZUlzdzdvZVRleCtZU0tVTCtKWGhKQgorYXVZb3VlUFlpVXJPeTlKY0ljRStrcGxGNHVQam1HYjUwTjhGR2JGcitiVGt3MDI0akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW82V1JhZEVWUGQ5VGRWTzdwNkpuSjBvUDVudjBSM29WNEdEK0t1dnYzZWRoNnBiMFlhS2sKd1FuYlE0Vmc4QmxndlgzdFFRT2Y3dUMrTmFYMjZwMUZYM2ZuSlg5QUtQZTNyd003aGdBZ3g2Rng5Y00rN2FXdAo3aUZLbmVVN3BqU0g0OG5pdmkxTFc0QzdPYW96b0EzVnRTd2x0cW5qL0s4M1FJVlhBMzRsMHM2dm1WUGVFUVBLCjFPSGFYNCt2MU5NVmM5d2o0REtHZCtpY0VhRU01UnlRTDlQNHRjZ01kOWhTQkRtekxaMENzYmZXcDgrcVJLbDgKaTJuMlJqSVdlaVg0ekxpNzE5UnhUM3pId3E1UUZwdTBzYlM4ZjlzZ3hyUkhlTlJLOUxIcXpqVDJTMldISHFVawp1VlJXTzhoZzJ5aDRkcjQ2SjF2RWNscE9heHNwamordnhRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-07T09:12:01Z" lastUpdateTime: "2026-06-07T09:12:01Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kv4hj" reason: AutoApproved status: "True" type: Approved