--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T21:18:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-11T21:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T21:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-11T21:18:34Z" name: system:openshift:openshift-monitoring-bcv4d resourceVersion: "8410" uid: 4197212d-53c0-45b0-ac88-76eed35ac57d spec: extra: authentication.kubernetes.io/credential-id: - JTI=1bb8c780-3098-4566-a984-d3a17e6465c8 authentication.kubernetes.io/node-name: - ip-10-0-136-69.ec2.internal authentication.kubernetes.io/node-uid: - 6cad9e18-f444-43b9-bec3-775a2e77b506 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-vrdhh authentication.kubernetes.io/pod-uid: - 43e312cc-1d7f-4b91-a55f-789d40439b8b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a52c42a0-961a-4797-91c7-aafd34495d04 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T21:18:34Z" lastUpdateTime: "2026-09-11T21:18:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bcv4d" reason: AutoApproved status: "True" type: Approved