--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T19:22:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T19:22:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T19:22:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T19:22:58Z" name: system:openshift:openshift-monitoring-9xdtl resourceVersion: "8647" uid: 00ac54a7-18f5-4553-8700-9a61405695ed spec: extra: authentication.kubernetes.io/credential-id: - JTI=35531e2e-66e0-45fc-9c01-5bd6e0992d36 authentication.kubernetes.io/node-name: - ip-10-0-143-91.ec2.internal authentication.kubernetes.io/node-uid: - 3bb091eb-c8f3-45b0-a6eb-7e6fe9dcdbb0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-gr7gb authentication.kubernetes.io/pod-uid: - c0acc219-19c5-4387-a6d3-7c83cffb00df groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0bffeebe-9ee2-4991-8638-14d17decd7a0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T19:22:58Z" lastUpdateTime: "2026-07-13T19:22:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9xdtl" reason: AutoApproved status: "True" type: Approved