--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T14:33:33Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-09T14:33:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T14:33:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-09T14:33:33Z" name: system:openshift:openshift-monitoring-jmh4g resourceVersion: "8373" uid: 6190219a-4cd7-49c6-b666-7fc3daa33b7e spec: extra: authentication.kubernetes.io/credential-id: - JTI=4e237e68-dd35-41d6-b1e6-b5f5b1f971a1 authentication.kubernetes.io/node-name: - ip-10-0-140-220.ec2.internal authentication.kubernetes.io/node-uid: - 148414f3-a100-40ca-a636-0f03b23a8f01 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-5ksp8 authentication.kubernetes.io/pod-uid: - ae68db00-049e-481a-9113-1e3db992ddec groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2e94d7d0-d5c9-47bf-8f3d-c7e1601c67b4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T14:33:33Z" lastUpdateTime: "2026-07-09T14:33:33Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jmh4g" reason: AutoApproved status: "True" type: Approved