--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T22:48:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T22:48:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T22:48:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T22:48:45Z" name: system:openshift:openshift-monitoring-mzqpg resourceVersion: "8230" uid: 8f627c3d-ec81-4674-9eb4-6b784acc2935 spec: extra: authentication.kubernetes.io/credential-id: - JTI=932f0581-370a-4ea3-9a9d-edeaa1be141c authentication.kubernetes.io/node-name: - ip-10-0-131-130.ec2.internal authentication.kubernetes.io/node-uid: - 1f571223-e4e2-4c62-a750-a56e86954a70 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-vh474 authentication.kubernetes.io/pod-uid: - 90fd9a18-a33a-45c5-b685-20e709a56cf7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKZmZCKzd0UkVORnl3NGE3dFlPdzRzVkZjbTBWYStXbzFRK0tERG9aOVdmQjJQbVZ1am8KdFJpc1ViaVJXNThYZkFmbHE5Y20vVzN5ci9XTy9FaGtFLzJnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlFQQpvVzVSeEVkWDNBSGZ6cU42STZYcWJGaUkvd05yOHZiTDBSaWdxaGZnZjdBQ0lEdjVjUytWdWRQT05TWFVKbDR0CjErUFFRSk5BMWpYakI1c2Zhd0V1VE40bgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 5b570f59-5314-476e-84b7-c96edc6ca448 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUtIaFdaV0VNejU5djRVak01RTVGOFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXdNakkwTXpRMVdoY05Namd3TnpJNU1qSTBNelExV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1gzd2Z1N1VSRFJjc09HdTdXRHNPTApGUlhKdEZXdmxxTlVQaWd3NkdmVm53ZGo1bGJvNkxVWXJGRzRrVnVmRjN3SDVhdlhKdjF0OHEvMWp2eElaQlA5Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFHZVJJWloxYURwcDFHOC9wMmxrL0dLMHM1dTcyUGdCa0hDRQo4eVNQZ1RKSm5WVlVBOHVuSmg1VytXbW1vKzRTY2FxYm9nS1BndENYZzZmNnJsMC9FREF3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFGQXpHeit0K1I1VGUvb1NLUXpHWVA2NmNMUTBDRlQrWFRXRnVDZEVacng5RkZYUkY1V0cKVFVuc0NKN1U1cW1pUHRmNnE0TDVXMDcvNUhjMXE2WWIwakIvMDltdXRuUVA2dnlsUWxDY01vTjl2enpJeE5WMApNNHNLRE5FR3NCeG5rcDhOdWhISXJEVi90d1pZbWZLMW1OY0VGV0sxS0pqSHlVNDVqcmp0TFUvbitraDZCcmwxCmpNY3NpTTVkdmxBQmlpNzdqRCsxWHlJbHRaeHE3REdSbGIvNHlXcDlPL2xXcFhhY2RMNEcyODdBMTY0L3pYaUsKL0dUaytJOVdKUklhUUt5OEFKVkV2UHFGcU9JQmUwSFhVck91NktCUGVydlJaWGQ3VFMrdTBMOFRYV0RMdW54SgpOeW9GcE4yMVd1OEdYb2t4T21sbDVqamEzY1FKQWZDQm5rST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-30T22:48:45Z" lastUpdateTime: "2026-07-30T22:48:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mzqpg" reason: AutoApproved status: "True" type: Approved