--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T12:42:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T12:42:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T12:42:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T12:42:05Z" name: system:openshift:openshift-monitoring-g85gl resourceVersion: "8108" uid: dbdee913-ea47-498a-b46a-0f77bd6e2e83 spec: extra: authentication.kubernetes.io/credential-id: - JTI=74d018a4-c1be-440f-913a-370c0e358001 authentication.kubernetes.io/node-name: - ip-10-0-137-88.ec2.internal authentication.kubernetes.io/node-uid: - 5fb3340c-c681-4f0d-b3f8-e2fd68561d03 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-8fq6j authentication.kubernetes.io/pod-uid: - f68990c1-be9f-4a0a-9165-cb17dcfa2ec3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0d786c6b-814b-4e22-9c80-91a4213f4b9f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T12:42:05Z" lastUpdateTime: "2026-07-22T12:42:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-g85gl" reason: AutoApproved status: "True" type: Approved