--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T15:56:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T15:56:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T15:56:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T15:56:54Z" name: system:openshift:openshift-monitoring-r58mb resourceVersion: "8834" uid: 44d78306-acb6-4a95-99c4-6453fd756657 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6517fa3d-e449-47f5-809e-180a14660d54 authentication.kubernetes.io/node-name: - ip-10-0-129-170.ec2.internal authentication.kubernetes.io/node-uid: - 7c679eae-5807-451d-a594-80b7117ca8f3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-52wnb authentication.kubernetes.io/pod-uid: - c81319a3-5266-4ae1-85fe-2a21766086ed groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d34f44aa-9c1d-418b-a7d0-beae915a4f74 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU1uVGFoTDdKbi9VMHQ5MWV0Z0Y5SHd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTRNVFUxTVRVMFdoY05Namd3TnpBM01UVTFNVFUwV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUSttM05NK3FoK2sxR0RtZkFlUEZDdQpIN0puaDZHT3c0MkliSnZWb3N0bmgydTZ3SFV6Z3ZuWUZmcURJS3U1WUZUYkI3dmxRVHFxbDVhMDkvcE4xeVNGCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFCdE1FVUIxY3pYemw1c0ZmcDhHVkI5UnlveE1tK1lmVkhmRgo4MUtLMlQ1bm1HY3hmWi9PUnFxNStTQ3dmcC9IcUNkU1pNUjJrUG5GaVk0VitGYStQOXd3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFHcGRiNGcya3ZwTnpDS09XVVQ3VW9GelA0MXNsdHFJWVdpTXJSRk5jaFhQY3JQenNTS08KSy9VMGVGKzNzYzJGQ0RPRmdiaDR6eHExT3g0NHFHclRNdzRsTTBtQ01BYTBoVEFKK2o0Y0M5bGpMRzY3a0dEWQoxUjE1K3lrYUEzUVlVNEdUVXl0Tk83eGNENHpMbmMxZGRyaW1QSCtFV2kzSUx6WnowV0dGQkx2cGRoZ0NobmhECkpPcXpBU3JZcjBmc1JsKzgzVzZ6RVdEQVJHWmhOZTJJUjRqSlNNazQ0S01jU0ZsekV2WlUzcEtjWWEyZ1RJcXIKTnBGMEM4WmRTalZ4VnByVnBXbHpqcFk5UXIxUDA4eDF6eEhpU2gxb0F2Ky9RNEFCbUxXTXZ6MUlXT2d5L2d3UApqUlZMUktZYnByeUxXRHN3K0p6TnpYbWdkS1lzV0YwOERjWT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-08T15:56:54Z" lastUpdateTime: "2026-07-08T15:56:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-r58mb" reason: AutoApproved status: "True" type: Approved