--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T20:59:52Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T20:59:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T20:59:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T20:59:52Z" name: system:openshift:openshift-monitoring-vgvxk resourceVersion: "9535" uid: 50079870-480f-4cab-ba43-d72a894a4804 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a09201d5-0826-4b48-85d3-8f5430f2d93b authentication.kubernetes.io/node-name: - ip-10-0-135-176.ec2.internal authentication.kubernetes.io/node-uid: - 6942b628-c624-4b31-97e9-dae6b221eb50 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-zxgv6 authentication.kubernetes.io/pod-uid: - 3b6a6613-02d4-4c40-bbad-cdf99ef1d281 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0caa1502-2463-4c3b-ad61-91ab616de1e9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T20:59:52Z" lastUpdateTime: "2026-06-08T20:59:52Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vgvxk" reason: AutoApproved status: "True" type: Approved