--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T21:38:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-17T21:38:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T21:38:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-17T21:38:06Z" name: system:openshift:openshift-monitoring-wlh9m resourceVersion: "8225" uid: d7811f6a-6606-456c-98fe-f37117d5677e spec: extra: authentication.kubernetes.io/credential-id: - JTI=499b0328-9269-4bfe-8b3c-b18eabb212f6 authentication.kubernetes.io/node-name: - ip-10-0-141-47.ec2.internal authentication.kubernetes.io/node-uid: - b0b415f0-e703-4081-8288-9a4f0d894266 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-vmb5v authentication.kubernetes.io/pod-uid: - 538ad283-f697-4eb8-b901-99763f2b9340 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cdbe1436-65db-40b7-b593-3e204b8b36ab usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T21:38:06Z" lastUpdateTime: "2026-04-17T21:38:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-wlh9m" reason: AutoApproved status: "True" type: Approved