--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T21:03:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T21:03:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T21:03:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T21:03:23Z" name: system:openshift:openshift-monitoring-d8zxr resourceVersion: "8247" uid: a5bd6253-8e9b-4fcb-ad0f-e635f31ae8c1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=3497451e-26c2-4135-b2da-82680236f7ab authentication.kubernetes.io/node-name: - ip-10-0-130-35.ec2.internal authentication.kubernetes.io/node-uid: - 9b7707cf-5329-4328-b5e4-3cc73c2733ff authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-vwjr6 authentication.kubernetes.io/pod-uid: - 95680620-6e1c-4356-b790-949697705f91 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 4f511b57-7f00-4336-92aa-bbcc95483424 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T21:03:23Z" lastUpdateTime: "2026-07-15T21:03:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-d8zxr" reason: AutoApproved status: "True" type: Approved