--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-03T15:14:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-03T15:14:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-03T15:14:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-03T15:14:17Z" name: system:openshift:openshift-monitoring-cq2ng resourceVersion: "8273" uid: 8335dc49-38f8-48c6-be19-1ded2a11b914 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cdcca9f5-f714-4d5f-bc5f-0d4aec9c6573 authentication.kubernetes.io/node-name: - ip-10-0-142-176.ec2.internal authentication.kubernetes.io/node-uid: - 1b830d6f-a247-4c16-a3a1-b542ee500867 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-x8ftb authentication.kubernetes.io/pod-uid: - 531cd3e1-eb3e-4443-b988-209c350ae15c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bc96d871-1432-4547-9fba-4282e7e3f3bc usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUo5aHlOaTdpS2k2VkxtSDJtZW1TWUl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXpNVFV3T1RFM1doY05Namd3TnpBeU1UVXdPVEUzV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVEdqbTNhUm5IN0JLUjZwUDAxUXB3NAo2TjY1T0NLRmhTc3A2NTZZVnNxb0Q0c2ljY28weGM2eTB5ZVE1OS9GZkhGT2lYUFdYT2RZbHlXQysyUWIrK0ZUCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFNd1pPU0FORzIxSXZmSldqNjZLNElYZHJUbHJEQzZkM3BhZgo4SVgxVldhc09xWGYwdE9Gb1M1QkkzNE1JUS9PaTB0ZUtuTThFa1p5RXVLeWJKVmJOa2d3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJb1BFdzUvd0U2S1pnSm04T1hYWVg5a0puN0E1cWV0L2tJT05OZDNxdnQ4RWZWamlsaDgKYUluY3cyd0FXK1ZqNXFQQkNZTkg4YWI2Mi9LNnBGaWF6Z3BXME5obFJkNVh4Mnk1TjlESkNjdWhjbDJmcUV6UQpPSGlYWmNtdmc1ZDdFSHpPa1dDRjhqTlFENTc4STBmajdWMEMwaGVpNGtmQnRKTmI5alYvOVBhL01EM1VyVVRaCmpmR3RNMzZEakxoMUw4dHFyNzh1VzhadjVmb0ZBZS83VHBjLzRacnF6cTVrc1RZT2pXTmJETFpMV0VydWZ4akMKM1JrZ2xrblRPMkVjcDFtaDdjRXFlUlpyeFFJYnY2ditmN1hyK0F1b0lEcFVNeHhjakZEVGlvb2JsdHRaZlo1OAo0Y2ZIRENWa01ldVNLNm9EblZ3cHAwTU9URDQvTWdoZmtKVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-03T15:14:17Z" lastUpdateTime: "2026-07-03T15:14:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-cq2ng" reason: AutoApproved status: "True" type: Approved