--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T02:30:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T02:30:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T02:30:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T02:30:45Z" name: system:openshift:openshift-monitoring-g2qzp resourceVersion: "9330" uid: cb4f7cee-f51a-47b1-8853-ecfed966d637 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3b938f96-e714-4d7b-baeb-452483eb463d authentication.kubernetes.io/node-name: - ip-10-0-131-5.ec2.internal authentication.kubernetes.io/node-uid: - b7d1d9a1-11da-4cee-a4e8-b303c3cb839b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-dsvcf authentication.kubernetes.io/pod-uid: - 361c8b92-f91e-4d15-9167-383cb9ef1c90 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0d37b31a-b200-413f-bd1a-32c06fd53741 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T02:30:45Z" lastUpdateTime: "2026-07-30T02:30:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-g2qzp" reason: AutoApproved status: "True" type: Approved