--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T21:22:16Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T21:22:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T21:22:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T21:22:16Z" name: system:openshift:openshift-monitoring-stxwr resourceVersion: "8264" uid: aedaff4e-7def-49ac-80d6-4b43eb6e800f spec: extra: authentication.kubernetes.io/credential-id: - JTI=2c35bb1d-8ab2-41aa-b9ad-09bed1a0aa28 authentication.kubernetes.io/node-name: - ip-10-0-130-213.ec2.internal authentication.kubernetes.io/node-uid: - 88472cfb-cd78-4494-be71-1f6c5654d35c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-s7sww authentication.kubernetes.io/pod-uid: - 4fb4b267-19c8-4f61-b649-35dfff7bec04 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJPQWFPWFZENWJnQ2p2aFYvUzVMK1lhNzJIakc2L2ZIeWRLWWRXL0RaT2ZnMC8yRndydGcKSWY1d0g0ajVFclVMVnI0UVJuMllDUHR2SWxIb3hkZVlXQ2FnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCRQorY2o5KyswejFpNFdvOUtmQXpsQjE4SG9UTURyd2lKemVQdFcrOUtFdFFJaEFNdVBhMTl3bWFITXlvVWhBYVRFCkZNZkIwMGlGM2tkUG40aEpjeVRyb0J6OQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: f73f1444-6eaf-4ee2-98fa-32dbc4d0a6a2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T21:22:16Z" lastUpdateTime: "2026-07-10T21:22:16Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-stxwr" reason: AutoApproved status: "True" type: Approved