--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T19:31:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-30T19:31:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-30T19:31:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T19:31:34Z" name: system:openshift:openshift-monitoring-tvd7z resourceVersion: "6857" uid: 909d7fa0-e930-48b6-8dbd-5fc32e853bfc spec: extra: authentication.kubernetes.io/credential-id: - JTI=5501e6e2-755a-41d8-850e-8f551b5364f9 authentication.kubernetes.io/node-name: - ip-10-0-132-214.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - e879f380-3e17-4bba-b07a-70dbf9b278f7 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-fcjbl authentication.kubernetes.io/pod-uid: - 02832de1-9584-4e12-9b94-8b6b52a71941 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 98017a27-6f4a-4267-bef1-4d79a797c704 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRWGR0ODlWb1NRK2pPTTBKS1JUMnkxakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFd016QXhPVEkyTXpSYUZ3MHlPREV3TWpreE9USTJNelJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQTHV1K3NWKzUrMStRSHFCSTFYTXgvTwoyUkd4bUdyQmhNcDNsR0JhdXRrQjR2UWhQVndZcHl0M2EyQlV0a2p1SXVVZ0p6Mnp4QnRFemxucEZ5MFNsbGFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWFsSVNaWWpUTDNVNi9MZDY4a1ZsbXJxYUR0UlkxRERmTGlaeQpoWUM0NGs1Y0Y4SzBpYWdGeHIzNTlvOFpFYmdzU0JjT2hlSTNIWUtDUHF3eUVmT2tSREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUswQlc3NVdPbi96bzF1V1RaYTBKTkxuSWpCWnhwNDlxWHpPU0JHQjVHSU9aSzVlL0JUaDUKaVdYTFFReDlxdWlnVWQrZDRncTVheUEvMXBkTmxJd2c0SnlCMTFNbzh2SEFaZnVsRnl3SWg4K0dPc1VYeUg4eQptS09XMmhqaDh0NUMyQXgrb0JCQ2tBdWRPV0tGOHdjNTRyOWg1UlVqSzBSR3B3TTY5QUh5UHFlZ2pjaXYwbFBzCkhIWGdlM3NFRnBoRkRmRmtIdFJqWE5aVGpVV2phVjdZaUpKbzRSZlRpUnRZekZ3QXhZOHZ5Rkw2aS9zcWIvNHkKMlJPVTFKOExBSjdWaGpjRG0yNmk1UmtDam5lUHVlbEJLeU5oaUJJdlkxSjVNSS9zTk96cTkzSlZMOEU3UXFUZAp3bFhFdm9keXhaOHdtSUpaa2VyUUxvS2g2L0gyTkt0ZnpBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-10-30T19:31:24Z" lastUpdateTime: "2026-10-30T19:31:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tvd7z" reason: AutoApproved status: "True" type: Approved