--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T13:26:07Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T13:26:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T13:26:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T13:26:07Z" name: system:openshift:openshift-monitoring-psthn resourceVersion: "8330" uid: 6ec0e8a5-099b-43af-a4fe-ee6c35e18f1b spec: extra: authentication.kubernetes.io/credential-id: - JTI=f1c8da9a-06f0-43df-a997-98df7eefee02 authentication.kubernetes.io/node-name: - ip-10-0-128-102.ec2.internal authentication.kubernetes.io/node-uid: - 6e4bfe1c-6fad-4267-bbf8-264bb5f0ccf7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-c4242 authentication.kubernetes.io/pod-uid: - c5f91285-8777-4422-81d1-20d5ddf8496b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 463de1f3-f456-41f4-82b4-6c8e260a8d1b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T13:26:07Z" lastUpdateTime: "2026-07-09T13:26:07Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-psthn" reason: AutoApproved status: "True" type: Approved