--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T23:30:16Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T23:30:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T23:30:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T23:30:16Z" name: system:openshift:openshift-monitoring-mgb5q resourceVersion: "8416" uid: f9026fcb-2c62-4084-9047-d3c8573e6bd6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8963d223-964c-4491-a4c6-eeacdec68d6d authentication.kubernetes.io/node-name: - ip-10-0-131-63.ec2.internal authentication.kubernetes.io/node-uid: - 2e63c75c-4d88-488b-9a9d-d952d95032b3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-v4jld authentication.kubernetes.io/pod-uid: - 477c6c0e-fc47-4c72-adbe-f697c23204ac groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2cc3df1a-f6ed-4492-a8a9-e191f842863d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T23:30:16Z" lastUpdateTime: "2026-07-24T23:30:16Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mgb5q" reason: AutoApproved status: "True" type: Approved