--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:59:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T11:59:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T11:59:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:59:40Z" name: system:openshift:openshift-monitoring-9ftws resourceVersion: "9508" uid: 70fd9447-3351-45e5-80ce-30eb3e9e6f63 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5a1ba091-a1f8-43ef-bfe1-a14c9f9cc1f9 authentication.kubernetes.io/node-name: - ip-10-0-129-85.ec2.internal authentication.kubernetes.io/node-uid: - ab83537d-84a7-44bb-a712-fcf8dd201f6a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-ztnmb authentication.kubernetes.io/pod-uid: - 822754f0-5188-4306-b13e-3299c46a5ae7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ecf8098d-ae5d-45b3-8623-268475baed13 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T11:59:39Z" lastUpdateTime: "2026-06-09T11:59:39Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9ftws" reason: AutoApproved status: "True" type: Approved