--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T18:17:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T18:17:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T18:17:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T18:17:31Z" name: system:openshift:openshift-monitoring-4ngql resourceVersion: "8307" uid: 2a925648-e291-429e-89f3-b37f9d266865 spec: extra: authentication.kubernetes.io/credential-id: - JTI=ce0ec71f-8ba5-4d1c-bfd8-6a723539f7c6 authentication.kubernetes.io/node-name: - ip-10-0-137-146.ec2.internal authentication.kubernetes.io/node-uid: - 7888f4d3-72ef-4683-869d-429fd51f164b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-cthmx authentication.kubernetes.io/pod-uid: - e7da54e1-ab75-41ad-9229-cee29e1bb9ac groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9d7acec6-564d-49d1-9141-95ee05280590 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T18:17:31Z" lastUpdateTime: "2026-07-23T18:17:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4ngql" reason: AutoApproved status: "True" type: Approved