--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T19:00:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T19:00:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T19:00:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T19:00:13Z" name: system:openshift:openshift-monitoring-htjtv resourceVersion: "8245" uid: 42a0919e-6e52-418f-b309-f30d4c564b1b spec: extra: authentication.kubernetes.io/credential-id: - JTI=47f90754-56c1-477a-ac01-1e9f8f4b37df authentication.kubernetes.io/node-name: - ip-10-0-139-108.ec2.internal authentication.kubernetes.io/node-uid: - 739338dc-0240-4d25-9a27-4d3cc6dbf5c2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-bj4sf authentication.kubernetes.io/pod-uid: - a45ea9ba-82ba-49f7-b8ec-4bfbc89fcf33 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBU3NTdGJ2ZitrdjEybUdRdXlSTjZITG8zVFA3MGdhRWg1dEFtV0Y0Q3p3RGdPcmRNSS8KVzQxbUtZYXlPZEJielBUVzVCOENFNllwY1pNVUxMdlJDMVBZb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTDBmbEYxTzg5dnRNdHRRNExyT2dUZGRlRmppU093YWQ1Yk9LL2lvdkFRZkFpRUF5bW9WZGFBa0d1Sm0xMmN6CllsRmw1elFSNzM2SWRUcHhIT2t6dTZRaXB4az0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 81d47007-1d48-4346-aa0f-32a910be33eb usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T19:00:13Z" lastUpdateTime: "2026-07-10T19:00:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-htjtv" reason: AutoApproved status: "True" type: Approved