--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T17:19:09Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-28T17:19:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T17:19:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-28T17:19:09Z" name: system:openshift:openshift-monitoring-9nhgk resourceVersion: "8435" uid: c6316de6-d4a6-4452-9dab-796b07fb6f8c spec: extra: authentication.kubernetes.io/credential-id: - JTI=759ebc7f-9601-4d5b-9bae-37f745c56a1e authentication.kubernetes.io/node-name: - ip-10-0-131-205.ec2.internal authentication.kubernetes.io/node-uid: - 272e5c55-2d27-40ff-b166-34756b7e7524 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-cbgkj authentication.kubernetes.io/pod-uid: - 4ca9ca37-0636-4057-a399-6984f435d927 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bee47c90-1abf-4e5c-b2c5-236e377f410c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T17:19:09Z" lastUpdateTime: "2026-05-28T17:19:09Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9nhgk" reason: AutoApproved status: "True" type: Approved