--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T12:26:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T12:26:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T12:26:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T12:26:38Z" name: system:openshift:openshift-monitoring-7mtz8 resourceVersion: "8603" uid: 2243617c-2f07-40c2-9c8b-6d5ffceb7a3b spec: extra: authentication.kubernetes.io/credential-id: - JTI=a9a82cc5-ccf0-4400-988b-b24c537b5e44 authentication.kubernetes.io/node-name: - ip-10-0-128-25.ec2.internal authentication.kubernetes.io/node-uid: - 19133362-96c0-4141-ac15-0e044048c165 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-rmcgr authentication.kubernetes.io/pod-uid: - 2188f74f-2cb0-4a90-a994-ceb43417c819 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a33a90fb-f3ec-45b1-ad90-a5c3c41d012c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T12:26:38Z" lastUpdateTime: "2026-07-29T12:26:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7mtz8" reason: AutoApproved status: "True" type: Approved