--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T02:25:32Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T02:25:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T02:25:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T02:25:32Z" name: system:openshift:openshift-monitoring-prstk resourceVersion: "9323" uid: b6cb0d65-f293-4b1a-baf4-230dfccf6b14 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c03f9896-3d5e-41db-ab66-e26582fa80a7 authentication.kubernetes.io/node-name: - ip-10-0-132-34.ec2.internal authentication.kubernetes.io/node-uid: - 2e1a7590-8570-4f45-95b4-3af6a7945cb3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-dlcws authentication.kubernetes.io/pod-uid: - 5ef69090-3807-4ec9-ab32-bb8194232ca9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 976ed998-abb2-43b2-9d9c-1dc1851544a4 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T02:25:32Z" lastUpdateTime: "2026-06-09T02:25:32Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-prstk" reason: AutoApproved status: "True" type: Approved