--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-26T15:39:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-26T15:39:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-26T15:39:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-26T15:39:13Z" name: system:openshift:openshift-monitoring-l8jqn resourceVersion: "8339" uid: 06973ad1-67ba-4622-9ce3-c76f4d9275f7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f9f9f196-4129-4466-91a2-5059a7280395 authentication.kubernetes.io/node-name: - ip-10-0-138-163.ec2.internal authentication.kubernetes.io/node-uid: - feff1e21-0c38-49fc-b7a7-50a409099112 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-2q2tq authentication.kubernetes.io/pod-uid: - 60d326a6-77da-4f72-965f-880f5c94f2b7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ffa0fa44-cf9a-478f-bad2-9cc72f6e4624 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-26T15:39:13Z" lastUpdateTime: "2026-07-26T15:39:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-l8jqn" reason: AutoApproved status: "True" type: Approved