--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T19:28:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-26T19:28:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-26T19:28:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T19:28:34Z" name: system:openshift:openshift-monitoring-tc8pq resourceVersion: "8212" uid: 54d8c071-171b-4c7e-bc6d-04e8ea09ec2a spec: extra: authentication.kubernetes.io/credential-id: - JTI=5cb2c621-d2df-4cef-bcd0-e6cec2f15fcd authentication.kubernetes.io/node-name: - ip-10-0-131-212.ec2.internal authentication.kubernetes.io/node-uid: - 9e44afa7-668d-44ed-8af7-10d75d3a04f1 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-q8qpr authentication.kubernetes.io/pod-uid: - e1ed8051-6098-4124-8d0b-eefd559e2bc9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 1e3c2dca-edf2-47df-b2a9-13a3e56c9e62 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T19:28:31Z" lastUpdateTime: "2026-05-26T19:28:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tc8pq" reason: AutoApproved status: "True" type: Approved