--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T17:26:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-14T17:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T17:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-14T17:26:56Z" name: system:openshift:openshift-monitoring-rzsx6 resourceVersion: "8357" uid: cdae6fef-14b7-4398-a9ce-c507f7ccbf30 spec: extra: authentication.kubernetes.io/credential-id: - JTI=caf931bf-d117-4f3e-8ea9-7f68bb56a030 authentication.kubernetes.io/node-name: - ip-10-0-139-16.ec2.internal authentication.kubernetes.io/node-uid: - 52208722-8707-476b-945f-df338a6e2a1a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-hznkp authentication.kubernetes.io/pod-uid: - f60de25a-6c7c-41f4-87ce-de3f4eca5c3a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 46c5aa34-a0a3-40a5-9fc8-5d204c60b6dd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVHQxcGJtYXA5OEpHTE4yVUliUzRGekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXhOekl4TlRaYUZ3MHlPREEzTVRNeE56SXhOVFphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLdDhTclZ4NnRPcWdqU2ZBS29LckZZagppRjBBaVpOWlNqZ1NTdjBtS25rNmpKS2hsWEd3Q3NtakREbzkvc0RXQ2dwald4K2ZwVWs0N01LdU1UeEVFUnFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUtiUHdON0YyS1dzRlRrSmw3ZTlveTJQc2FVTXIvVWlLa2p6MwpWYldOMnoyaXR5a2ZpM2FoUWF1Y3A1b01ScndtaGljbXZxMVJhSUg0VEZFeVFmWDNXVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWptd0E4TUFxVGdrWjIvVnRid1FPMXZseThQSUpnaVl4STVGcTVkOEJrREQ2SGNjQS8xN1gKNng2eC9PQUEyZHFMN1U4RXRBYlQ0bXl6NWx2ZEdOanNZblYvKzVQVWNGMzJnMlZvd0RrbHY0aGVSOGR3RGliSgpyMEtQN01oSncvOGtoai9xRGdaZXFYd25NQUVDZWpML0RvVzUzbXgyRnVmb2RwVmtOSkhBYUNoRnVuUytKSHpJCkp6RTNkaFh5RS9ZcWxUdytIejNKMzVkSlJHY0ZsWjhkVmlqSmc3Y0l3QVJNOE0ycGg5V1VPUXRUdzI2L0xPZzcKUW0weDVJNGhOZjRxTU52UkFIZXJDdmk0ejA5d2JMN3BGVUlZZkllN2VBMXc1Z2NYL2hhMkxMRnJlUk94NXBlaApyczF0cXRVTEJPNTV3ZTgycGNmcHdLZHFVWDljNjlJOHRRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-14T17:26:56Z" lastUpdateTime: "2026-07-14T17:26:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rzsx6" reason: AutoApproved status: "True" type: Approved