--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T00:22:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T00:22:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T00:22:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T00:22:23Z" name: system:openshift:openshift-monitoring-2vghv resourceVersion: "9264" uid: afa3f90a-6472-493c-b810-cdeeea04dd5c spec: extra: authentication.kubernetes.io/credential-id: - JTI=b56ef580-a8f5-4471-8544-b71e23a09551 authentication.kubernetes.io/node-name: - ip-10-0-130-30.ec2.internal authentication.kubernetes.io/node-uid: - 7dd6894e-8a8f-4390-942f-87841b250720 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-4jvrw authentication.kubernetes.io/pod-uid: - 954d8cc8-f8a5-4b7c-8569-cead4287cbb5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b6a3a650-5729-4570-90be-f58c84274d68 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRXQ3WDBLMTNINjk4VFlORnZEQmdQVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ESXdNREUzTWpOYUZ3MHlPREEzTURFd01ERTNNak5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQS1ZNditlS3Z1eVlKZ2VXV3JUNENOdApIVWhSVFJGaUdTckJQZVdHYThJdzRINndieFZLUVZHMVpuazROWUdQWXJ0R3V4dlVucTBlaC9MeitUdVhRbGFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUNwck9CL3V5Szc1UFBOYU95SGQ1V1RwYkJVYXBzZkt5RzhCawphQjArUXFuTlZkdUZvSmRLdFlTY2hLT1ZWbWFTNEFiL0Q5RVFEb3AzdjVHdWE5QmFCekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW9aN2gxZy9DcUsrNXVDUVhPRHdxTlh0RjRZaDRwdjd0N3o4V3VWbUg1OFpscDBiRUlIR3kKdlhFQ1hLVUU0R1ZZclQ1cFRSbFRZeDE0bisyRFlMeHduS3dxeUlmQW5UQkdTMmQ1amtaZEFTZy9WMjJPYWs2QgphZFBvV2ZKVlUrSlZkaEZQemVGNjdsSEpJNzlEeFFVQjhoWGU5dG5DaEVOV0VlQjdub2FtZExyZTRsaXJxWVluCi9HQmNuNTZDVms4SElVT3BScnpyeHpJTmhSK1hwdklXQ01XN2FMSVJrSVA3YThMd3ZwYUtaTGhYT3NzOUdVVkwKNTFRdDJDSlo0a2Q5Z2czS01aVWVtZGFXa2RmR1lFT29OdGxOZ2ozb3JJdnY3Q2tjeVZ2VFlTWkU0NnBDbFp6Lwp5QTFNY1VUQjUxT0Jud3Zwc0dUR2pQU216bGhvM2pGLzR3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-02T00:22:23Z" lastUpdateTime: "2026-07-02T00:22:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2vghv" reason: AutoApproved status: "True" type: Approved