--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T10:56:42Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-15T10:56:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T10:56:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-15T10:56:42Z" name: system:openshift:openshift-monitoring-btpwp resourceVersion: "8513" uid: df6d919d-3e8c-4b24-8313-be640bf1ad61 spec: extra: authentication.kubernetes.io/credential-id: - JTI=534a66e6-3f3e-4272-9229-187629080cc3 authentication.kubernetes.io/node-name: - ip-10-0-137-159.ec2.internal authentication.kubernetes.io/node-uid: - c2e5a125-96f9-40e2-8ab7-303b1688e1d3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-mcqfg authentication.kubernetes.io/pod-uid: - 69e50536-7a0b-4dff-ae30-899250e7f849 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cff7907d-626c-44a1-96a9-5ec66f8c6121 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T10:56:42Z" lastUpdateTime: "2026-06-15T10:56:42Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-btpwp" reason: AutoApproved status: "True" type: Approved