--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T21:33:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-08T21:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T21:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-08T21:33:50Z" name: system:openshift:openshift-monitoring-h8drm resourceVersion: "8283" uid: 848b395a-86c8-4000-9c7f-00b87a419acd spec: extra: authentication.kubernetes.io/credential-id: - JTI=c2798a74-df8b-4677-a35b-d3af98bac4c3 authentication.kubernetes.io/node-name: - ip-10-0-131-2.ec2.internal authentication.kubernetes.io/node-uid: - eeae96dc-890e-440e-93d4-5d015b616ba9 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-mxn6k authentication.kubernetes.io/pod-uid: - 2ca1c862-0bb7-4a32-8029-178e63da5bde groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBU1VrT3VqL0N4M1d6cjBTZFhIcGtveHdXYlhtYXRBdXBVbEZxVXV6QlB1MU43d0dITisKK3diSTF6U2FnUlRXQXdTRXh2NTJRV29EK1RWY3BkT0hhVkpmb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSkZoZWRiK0FzajBQaWxadGthR1pRY09PZWdjN0EyNG85RStWZHVQWi9tSkFpRUF2aUgxVllHdGJRdEJlNVRWCnFrWVl3V1plTys0cHU0ckNsMUNKUVFzQzNIND0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 3912d9d0-d1ac-425d-aadc-faa96b65ba8c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T21:33:50Z" lastUpdateTime: "2026-07-08T21:33:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-h8drm" reason: AutoApproved status: "True" type: Approved