--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T00:44:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T00:44:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T00:44:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T00:44:48Z" name: system:openshift:openshift-monitoring-b7jsx resourceVersion: "8581" uid: f36eb0d5-63cc-4558-b05b-961c261e62c8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=12b22770-187e-432f-9285-872c47e90295 authentication.kubernetes.io/node-name: - ip-10-0-134-28.ec2.internal authentication.kubernetes.io/node-uid: - 57f8cb75-a0fd-41fe-9b62-a5972e0af982 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-hvnbr authentication.kubernetes.io/pod-uid: - 156c239b-160e-4477-a71c-4ad6bca201af groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJLcFMrdmUvaEJwS1h0b3VLQ0xBUFQ0V0RORjh2V1RaNFR3U0tGK3VWZ1F3WUl6T1lWTnYKWGMyc0loMVVNTGhVcGQ0MnJCNEoydmRZaml6RjBHZEVaM3lnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlBawpkSVJmOGFIbWpXeEIxTG5RY0h2QzA0ZzhzdG9XUkpBTnRwd3RKTVltSFFJaEFQdThkcmNuR1Q2T3kvcVNDeE5hCmVHWU10dE9Kdkp6TWY0elY2RS9sNHk1UgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 269d0de6-4e31-482b-8d3b-b6499a752f43 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T00:44:48Z" lastUpdateTime: "2026-07-30T00:44:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-b7jsx" reason: AutoApproved status: "True" type: Approved