--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:57:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T16:57:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:57:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T16:57:50Z" name: system:openshift:openshift-monitoring-7snvz resourceVersion: "8179" uid: 6bff667a-5482-4a72-8503-784de9ed2804 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c6ce5704-5c02-4da5-b803-57c92aa0b1ec authentication.kubernetes.io/node-name: - ip-10-0-129-84.ec2.internal authentication.kubernetes.io/node-uid: - 31db45d5-314c-4d4d-85ac-95c3262b5179 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-kt6d2 authentication.kubernetes.io/pod-uid: - 6ca26a8a-542c-40f6-9af6-d06625d47632 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e967222e-6b35-4526-bfee-f8c2477e3452 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T16:57:50Z" lastUpdateTime: "2026-07-27T16:57:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7snvz" reason: AutoApproved status: "True" type: Approved