--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T18:07:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-23T18:07:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T18:07:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-23T18:07:47Z" name: system:openshift:openshift-monitoring-llqbn resourceVersion: "8664" uid: 915cb0df-b28c-4766-89e6-b35eb60fa20c spec: extra: authentication.kubernetes.io/credential-id: - JTI=027c569f-d06f-42aa-9381-487cbac88e1b authentication.kubernetes.io/node-name: - ip-10-0-143-244.ec2.internal authentication.kubernetes.io/node-uid: - 9a68d19e-1e19-4741-8f91-772ec82aad60 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-spqxk authentication.kubernetes.io/pod-uid: - 5abd4122-6989-4780-bb88-cc36a881b421 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVHluNEViaXI2Q1lORHNTL2s5SGhleXl2Yk5nTmtzZW5JQ0J2dDR0UEZqWjR6a2RhYlcKajlvVkNSRU9XUlFHSHlmY0hDOUZYc1JPVGtuMlNiWFZUeTcrb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTWtKUExiL1JGWXhZV09XRmltK2tkb0NZWHZ4UENJb0NVQy9VMURBcjJYWEFpRUExOHJFblZnWTN1ajJmczYwCjVnSXJhdkxOcWNlMVJUc3dsWm1Ec0hvbjAwRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 464eda65-98a2-4e35-9c35-bc8a94b1c0d1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU8wSmswSE9udVFSakZiZnU2Wk40SDh3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056SXpNVGd3TWpRM1doY05Namd3TnpJeU1UZ3dNalEzV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVHluNEViaXI2Q1lORHNTL2s5SGhleQp5dmJOZ05rc2VuSUNCdnQ0dFBGalo0emtkYWJXajlvVkNSRU9XUlFHSHlmY0hDOUZYc1JPVGtuMlNiWFZUeTcrCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFNbzRCejA2ZDBSZkkwWEVxQTdYLy9mTFNSYVdGeWZzTm1VUAphTFpFRTFPQ3QxR2Y0bGozVmJscjd3bTJXMkZDcFRaeEdDZ2ZvVzEwQjNGVTBsRk9XSUF3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFGS3NjQTFaWnREOHJueUV4T0xyZVpaMTVoK09uYlNkSW5sU1FWVXJrZG55Tk04V3ltUG8KcG1yV3lYbnJ1TUhJbUtqY0RkaGg1eTMwQ1pKRHRRakhLY0l1RStMai9rRlcxYkRvZU9YL3pDK1Z2RUgxbEpvZgpkdUJZZWEvUXdDME5KanBHUU9JRlh6OW04SHNaaHpxREhCeG42cDZ4NVZnYktCRDUrN1dWaXJsZHE5QWRCYm5mCjNBNlZJVlpIa2czcnArU1NPWllnd2QvMVBnWGluOGptT2ZiaE5WVkVqd2VvTzdONHRhSDhrY0x3R0lxeUIrbm8KMEVoVEtCL0NZQWMwUW9CZU5DcUpnWXBETjZJakZsUmtqS1AvcnBBdXQ4Sm14eWo0cWxoN3dSNjQzdktPM3YyYgprSlVvd2x3eEp5VHB0UmkxMXgwWFBjRVBodHhMS0ljR1l3MD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-23T18:07:47Z" lastUpdateTime: "2026-07-23T18:07:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-llqbn" reason: AutoApproved status: "True" type: Approved