--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T23:23:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T23:23:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T23:23:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T23:23:40Z" name: system:openshift:openshift-monitoring-zqb6h resourceVersion: "8361" uid: c44ceb69-7075-476b-9ee8-62f94332711a spec: extra: authentication.kubernetes.io/credential-id: - JTI=94886eef-fcd3-4ceb-aa8e-6a242d00b456 authentication.kubernetes.io/node-name: - ip-10-0-130-115.ec2.internal authentication.kubernetes.io/node-uid: - 20b02451-da41-474d-9d67-01c0bc0b357e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-cjjvx authentication.kubernetes.io/pod-uid: - 6162850d-acc9-41e3-83f0-2c324b0e9f94 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e09214fc-435c-43d6-b346-80f5714903c9 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T23:23:40Z" lastUpdateTime: "2026-07-02T23:23:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zqb6h" reason: AutoApproved status: "True" type: Approved