--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T02:34:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T02:34:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T02:34:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T02:34:40Z" name: system:openshift:openshift-monitoring-9qcpc resourceVersion: "8292" uid: 12215a5d-8a74-4d17-9681-12bb81a46808 spec: extra: authentication.kubernetes.io/credential-id: - JTI=26477ea9-6526-473f-b74d-762d7f370097 authentication.kubernetes.io/node-name: - ip-10-0-143-228.ec2.internal authentication.kubernetes.io/node-uid: - 774f348e-70bd-419d-ae46-7bc07484780c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-frrmp authentication.kubernetes.io/pod-uid: - ffbf8b54-3714-486c-bc13-4eeb9cd28d26 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVGJtVmJtNlo1M2NUUGUxb1MrWEp2ZXVPa05iSmhNeTlFVzdIWHphUEZFK1pobEhKV24KVGd5a2d1ajNzWGRzK2gyZ0RjTzJzb1ZkZUFvYUNHY2d5M09ub0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSnRyU1VDSzNNeVFabEdCRHpJbFlpRzhrSCtzTEo2NU1UVDRFbGs1eFJ5VkFpRUFqcmR1SlQvZWE2YnM3ZmZlCldRMW40R0NxTW5KdXdqS1ZZd3pNUzVZM2grMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: e6681ba2-2d79-4949-816f-1069fd1569c3 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T02:34:40Z" lastUpdateTime: "2026-09-10T02:34:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9qcpc" reason: AutoApproved status: "True" type: Approved