--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T20:09:38Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-06T20:09:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-06T20:09:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T20:09:45Z" name: system:openshift:openshift-monitoring-8x42g resourceVersion: "7810" uid: cb6a7f83-0909-40b4-aa56-8342d48efe7d spec: extra: authentication.kubernetes.io/credential-id: - JTI=0a204743-1d39-4a24-b4e8-93d3b6b6d537 authentication.kubernetes.io/node-name: - ip-10-0-138-183.ec2.internal authentication.kubernetes.io/node-uid: - 0a4a670b-7bad-4a6e-ac19-567d4a312898 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-pn9vw authentication.kubernetes.io/pod-uid: - e37a1dc2-c75b-44e2-89b2-fc5222569902 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKcU5LUGRqdzkydVBabzM1bmJrYWZmQmhkUy9VZ3Bzc3NCMjdLb0NxVTJ0cTBqMGFiQmYKKzFVVlFkNjFpVXdWdGdEajlwRC8zRWJiU3VGdkpaZ3hNZWlnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQprT3FqL2ZZVWRmazZCSlFyWVRyS2NlQkllN3lBSmRNYnBYZnhETERlck1JQ0lDMmVuTmp5S2ZVMEQxdS9FUXpZCk9neFZpSkRjVVlUMU13S3Fyc2Z2K2RIVgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 5d492256-03e8-47e0-bb12-947730279c6a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQVJkdjFVcjhESFRoSm4rWVJrTmZsVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EWXlNREEwTkRWYUZ3MHlPREEzTURVeU1EQTBORFZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJKcU5LUGRqdzkydVBabzM1bmJrYWZmQgpoZFMvVWdwc3NzQjI3S29DcVUydHEwajBhYkJmKzFVVlFkNjFpVXdWdGdEajlwRC8zRWJiU3VGdkpaZ3hNZWlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTFaUmN4VHVUTUFiV3NWQ2ZVWnptTEEwVEV5b1dkMEdiT2VKegpZNXFBL1dLMlUzdVBKbTAvNGhmdnIzd08zblJuZ1Q0T2lQTVFCcU9vZ2d4MEpHODB3VEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVUrRU9obzN3bkdYM1JQaHJmNWtQYkhRNXBNellSTHlwc3NSc1pBN0JJNm5Sc1ZvQnp3R3gKMEpjV2YyekdlTGRUUmZSd01tNzk1U2JqT1NQaE1Bcy9GWWMvd0RsaUs5dWRnRGViSHN4djhqb09rd2wyTThZRQozSWZoc1A3N3F4aUd4SjFIN2hpaFBZYndORjJjM1lTalJyVWs4T01UMEY2OTA4NlhBZEN2NnF1QzhlRHdNSndKCmF4VGtvdHB1OWFtMXFZL0E4OUtXK0I1V0lCREVJOU9iV3J6VXp1VlZkcTdDYTVIRENNbkhaTG9ENGg1bEtPRmgKcWVtdm1YUVNDc1VUUDZQVnV4RHdYVHFHVEExd2lqN3lOSmdpUHVpdzZ1emwxSXd0L0xKWGdBV3gwSkpmdGpyUgpRUkVqN0hGL3FhUUQwTmtDVW9KaUtYeXVmcjRvdnNCbjNBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-06T20:09:38Z" lastUpdateTime: "2026-07-06T20:09:38Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8x42g" reason: AutoApproved status: "True" type: Approved