--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:41:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T17:41:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:41:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T17:41:44Z" name: system:openshift:openshift-monitoring-jd6q2 resourceVersion: "8042" uid: cc175ad9-18d4-4854-abcb-fc0e84c7fdcf spec: extra: authentication.kubernetes.io/credential-id: - JTI=51ab3ab4-c39a-4be1-914b-657dbde32361 authentication.kubernetes.io/node-name: - ip-10-0-129-170.ec2.internal authentication.kubernetes.io/node-uid: - 88abba99-a9bd-448d-8767-fe6a9a654f5a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-jzjvx authentication.kubernetes.io/pod-uid: - 2d8f2aa1-a7fe-4b51-8e61-5eb356bd27e4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKZVRnZ2ZpOHJqSWgvSDZ3ZjBUdVRPOEs5VFNCczVteHlzUlNiYmF3NTEwbkhKOGtEWW0KaEhoSjMwRzhZZC9pUW9wK3JHVDROODJLSitLc0hpWEh1bEtnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlBUwpxNW0xSjFrRjJFUzU5aGZGZUI2Y3NLYWVXRGMwSVBIWFBhSVY0ZVp4RGdJaEFQbzgxcTJBS3dkTjJESS9IOHlPCm1lU29DOC9tSUxzVEFpbEJnRGIwR2hIVQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: a9a19f53-27a7-4e02-b292-7c51018cdaee usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:41:44Z" lastUpdateTime: "2026-07-07T17:41:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jd6q2" reason: AutoApproved status: "True" type: Approved