--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T01:04:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-25T01:04:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-25T01:04:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T01:04:52Z" name: system:openshift:openshift-monitoring-8mmcg resourceVersion: "8107" uid: 34640f16-8cc4-46ae-87ee-11d41c7bf60e spec: extra: authentication.kubernetes.io/credential-id: - JTI=c85c7e26-760e-4404-8259-ba69b02826c1 authentication.kubernetes.io/node-name: - ip-10-0-134-192.ec2.internal authentication.kubernetes.io/node-uid: - 61396775-8bf2-44de-9f05-36b7818e7783 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-pps9j authentication.kubernetes.io/pod-uid: - 9cc4019e-1b58-4c13-a6ef-ca0b4784bd3d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 47b4fe39-067a-48b5-86e1-1b63c6df5ecd usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T01:04:50Z" lastUpdateTime: "2026-05-25T01:04:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8mmcg" reason: AutoApproved status: "True" type: Approved