--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T13:50:54Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T13:50:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T13:50:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T13:50:56Z" name: system:openshift:openshift-monitoring-5gbp8 resourceVersion: "8291" uid: 2f3340c8-a868-49af-9299-ce37beced5a7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=bed94e26-5aa6-477a-9483-2dcb93501493 authentication.kubernetes.io/node-name: - ip-10-0-134-178.ec2.internal authentication.kubernetes.io/node-uid: - 5d9d7478-70fd-43a8-a2b4-7a19f89583cd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-5jdhp authentication.kubernetes.io/pod-uid: - eae37054-b234-4244-af8e-83179addfb00 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6700a605-6377-4878-863a-cd4a591f787a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T13:50:54Z" lastUpdateTime: "2026-07-15T13:50:54Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5gbp8" reason: AutoApproved status: "True" type: Approved