--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T15:04:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-03T15:04:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-03T15:04:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T15:04:13Z" name: system:openshift:openshift-monitoring-5rftv resourceVersion: "7728" uid: 062c5229-4e06-4d41-94b0-2df0fe05c57a spec: extra: authentication.kubernetes.io/credential-id: - JTI=ce980286-21c6-46e9-aa24-596e4fddb602 authentication.kubernetes.io/node-name: - ip-10-0-130-78.ec2.internal authentication.kubernetes.io/node-uid: - eec7a557-b8dc-4731-9370-4dd70f92835d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-88whh authentication.kubernetes.io/pod-uid: - 399fce46-fa37-43a7-b31e-0e5848d3735e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a9ed2977-6135-4648-b1fa-1febab973a7a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVW5laVpuenhjZk9LNzRYY2tJNWxaakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1ETXhORFU1TVROYUZ3MHlPREEyTURJeE5EVTVNVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJONzhQT1N2bDR2OGgxbWc3c2Vxc2hxMgpDUDFaR09jbzA5L3A4L3E4Mml2cTBqWS9ZUnp5bHd6Y3hGZFh2a25FaFJOR1hMRjBxZjNxWm5sSmU2M1F6WG1qCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXpTZGtEbGFtc3NWRDZoLzBMVzVsR3JLc2REdExXbkF2UjFGeQpiK1FIRkF3cy9nc1FaRlpkWnFCSFBmanNKcnRiU2RvOWVhNTNic3h5S2RJRWg0VWFUakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWxZQmZVZnh3YTk1TFAvM1hTMk53b3dqbVYwVmg2WGZzUXdUcDcwTkhLaHg5WCszeVpkT3AKUWhxQzhuL25jZWNvT3dPZ2VVYWhJajF4ZkZPK0dncGIvQ1dBcUVCYnJFMjR4eVFvR1NpeThRMzNNaWNkWFpadwplZGd6c1NCTjBjT0RjcDBpZXdITFQ1NTVjQmRPSERpQmNyZ1l5OWJ6bGJwZU9RekVybkFWNll4RlcvSE40eWR6ClQ1Y0JsNjZFMGNsTUFaWTljZllDdEk2OGp2d2QvYVptQXFoZVk0UEZzQlNCMzJNelpZeGxsUzlVSWwxNXV5dVIKNC9sbDFJZ09obUNtN0dabHp2V3BmZVNLbWlZMkRaRFNMK1FWUmQ1VitHSERnTzJQbDB5TFdDZ3F6T3hIVjJjVwp1Rjh4MFNzUU5hbjJ1ankxbVk0R2NKYlUzNjBiU2NZZktBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-03T15:04:04Z" lastUpdateTime: "2026-06-03T15:04:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5rftv" reason: AutoApproved status: "True" type: Approved