--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:06:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T19:06:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:06:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T19:06:34Z" name: system:openshift:openshift-monitoring-9bqg9 resourceVersion: "8096" uid: 58881b19-4025-437c-9a0f-ae7995a582af spec: extra: authentication.kubernetes.io/credential-id: - JTI=ff36c840-4d20-4641-860b-12f9b4601c9e authentication.kubernetes.io/node-name: - ip-10-0-135-75.ec2.internal authentication.kubernetes.io/node-uid: - a87bcf03-718e-47d6-988c-fbdbb5e9b821 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-sbcwk authentication.kubernetes.io/pod-uid: - 0836c54f-1d78-4899-b275-5605be75f491 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 88f89d9f-b27e-4a29-b425-afadfd643d87 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:06:34Z" lastUpdateTime: "2026-07-02T19:06:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9bqg9" reason: AutoApproved status: "True" type: Approved