--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:12:59Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T17:12:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:12:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T17:12:59Z" name: system:openshift:openshift-monitoring-jl7k7 resourceVersion: "8099" uid: 961be51e-859c-417a-a458-692ec76a64ba spec: extra: authentication.kubernetes.io/credential-id: - JTI=1a8783a6-1343-4c2c-a58e-f80570380988 authentication.kubernetes.io/node-name: - ip-10-0-137-217.ec2.internal authentication.kubernetes.io/node-uid: - 62284ebf-a6f2-4e86-9810-b66b9f470fad authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-6zv7s authentication.kubernetes.io/pod-uid: - 170c6e7a-0aa9-41f8-a475-904a458b67a0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 79537a58-e0d3-4eec-8c44-70ea6bf5f151 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:12:59Z" lastUpdateTime: "2026-09-10T17:12:59Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-jl7k7" reason: AutoApproved status: "True" type: Approved