--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T04:08:02Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-18T04:08:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T04:08:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-18T04:08:02Z" name: system:openshift:openshift-monitoring-h7xx8 resourceVersion: "8711" uid: 597fbf3c-5ea7-446c-8b7e-b2d3ae5d75da spec: extra: authentication.kubernetes.io/credential-id: - JTI=0ec00f9f-1f3b-49d6-b2bc-105f066fc632 authentication.kubernetes.io/node-name: - ip-10-0-143-113.ec2.internal authentication.kubernetes.io/node-uid: - 5d8ca1eb-ba1c-4cde-9438-398285c62a30 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-847b8bd8d7-flvwq authentication.kubernetes.io/pod-uid: - 51bce097-e2d2-42a0-a3ad-8979e4c794a8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cd98c81f-4ccb-4c3d-afba-abcce38eb218 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T04:08:02Z" lastUpdateTime: "2026-09-18T04:08:02Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-h7xx8" reason: AutoApproved status: "True" type: Approved