--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T11:25:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T11:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T11:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T11:25:06Z" name: system:openshift:openshift-monitoring-qqw69 resourceVersion: "7901" uid: f509ab18-b863-40f1-ab38-f940981d0789 spec: extra: authentication.kubernetes.io/credential-id: - JTI=0e51a3f7-d680-4c40-8bdc-ed8eac6a7ba7 authentication.kubernetes.io/node-name: - ip-10-0-135-12.ec2.internal authentication.kubernetes.io/node-uid: - e9eb7b6f-17e0-4d68-82ac-73459d511495 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-l92nk authentication.kubernetes.io/pod-uid: - 4fc79d4d-6476-4c68-8ed8-4716cd450a4b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: df75f797-7e8d-4b3c-9181-fa5bc0f63277 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T11:25:04Z" lastUpdateTime: "2026-07-22T11:25:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qqw69" reason: AutoApproved status: "True" type: Approved