--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:28:37Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T17:28:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:28:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T17:28:37Z" name: system:openshift:openshift-monitoring-n2j46 resourceVersion: "8194" uid: db9ad9cf-1697-4aa8-9bc6-e73fae67f502 spec: extra: authentication.kubernetes.io/credential-id: - JTI=eaa567d7-470d-4003-a35c-2ffc2d3aca7d authentication.kubernetes.io/node-name: - ip-10-0-141-75.ec2.internal authentication.kubernetes.io/node-uid: - 95fb34f4-fae6-46b4-bf71-56e9667aa037 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-52xr5 authentication.kubernetes.io/pod-uid: - 2308b91e-a103-451e-b06f-fc5bb0b50c97 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d78ce6cc-5722-48f2-a54b-75369c25fbf7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:28:37Z" lastUpdateTime: "2026-07-07T17:28:37Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-n2j46" reason: AutoApproved status: "True" type: Approved