--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T07:16:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T07:16:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T07:16:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T07:16:09Z" name: system:openshift:openshift-monitoring-5xjq9 resourceVersion: "8400" uid: d700be1a-f3fc-41a7-8ddb-31286c48c938 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2be9dd02-203a-495c-b4a2-c047a7dfcb9c authentication.kubernetes.io/node-name: - ip-10-0-136-73.ec2.internal authentication.kubernetes.io/node-uid: - f499c951-319e-4765-b69d-2c47d98da97f authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-lqljb authentication.kubernetes.io/pod-uid: - 1ac2baf2-1488-4dc6-baec-f6f313f330e0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4243a183-220b-49dc-91be-4e816322a0a1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T07:16:09Z" lastUpdateTime: "2026-07-29T07:16:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5xjq9" reason: AutoApproved status: "True" type: Approved