--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T17:40:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-17T17:40:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T17:40:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-17T17:40:51Z" name: system:openshift:openshift-monitoring-j6zgn resourceVersion: "8266" uid: 4e199638-5a74-480f-ba02-f6f6a4a2b03d spec: extra: authentication.kubernetes.io/credential-id: - JTI=7203ee37-a1ca-4406-a98b-5646e44aadbe authentication.kubernetes.io/node-name: - ip-10-0-133-127.ec2.internal authentication.kubernetes.io/node-uid: - 9c4065d4-97de-4fbe-8ddf-485f37e6ea1d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-4sxf2 authentication.kubernetes.io/pod-uid: - 1b994728-13e4-4275-ad5f-541496a45529 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a432af05-5aed-41b9-886e-65c822eb673a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T17:40:51Z" lastUpdateTime: "2026-07-17T17:40:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-j6zgn" reason: AutoApproved status: "True" type: Approved