--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:53:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T20:53:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:53:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T20:53:29Z" name: system:openshift:openshift-monitoring-bnb69 resourceVersion: "9497" uid: 10e5f232-1141-4065-9ac4-502750178873 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2b72b0a8-4bb1-4732-9050-3d47c8255e86 authentication.kubernetes.io/node-name: - ip-10-0-134-62.ec2.internal authentication.kubernetes.io/node-uid: - 92098df7-3de6-43f8-bc5f-5889af8afc26 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-49fbc authentication.kubernetes.io/pod-uid: - 1d6d21b7-47d9-423f-9127-f52cec9a1903 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 8430b538-f666-4c20-b5f8-86517e154935 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T20:53:29Z" lastUpdateTime: "2026-09-09T20:53:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bnb69" reason: AutoApproved status: "True" type: Approved