--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T04:07:22Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T04:07:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T04:07:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T04:07:22Z" name: system:openshift:openshift-monitoring-hmnxs resourceVersion: "8522" uid: 46e3d728-586c-44f8-afb1-449c810e3554 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8954131b-8b27-4631-bb0a-356d6683c08e authentication.kubernetes.io/node-name: - ip-10-0-128-222.ec2.internal authentication.kubernetes.io/node-uid: - e4e2d883-741a-4dd8-acba-94e6201da2aa authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-n29ck authentication.kubernetes.io/pod-uid: - b46dec59-62a8-45be-a415-049fa148fcdd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 39ea9aad-d328-4969-a87b-df56160b6ae0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRT2Z3Y2NPcENSL1ZncE9MMWVFMmhhekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UVXdOREF5TWpKYUZ3MHlPREEzTVRRd05EQXlNakphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLaXlQam5aY0V3YVhvMzJYeGd4Q0owcwpNeFRmaGxtSEdOaUZBY0hDL2tvd3I0M3FibEx4VmZmVm5Pb2s1UGI4dENQOWltWWJNUGxzMS9udTJKRDNoWDJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXVuQ0JsWWxZMkM1WU9pZnhTUWNGRlZmQWtOWW5WcXlLaHNKaApIdzFVWW1DMFZMcE9vdHF5YVRkODNGSklDVEV0MWVzYTJydlYwUEpPSWR6clNkVENrREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQU9Ib2lPWmhzT09QYnd3ZTJ5aEJoUy9xWlV1SEhYc0hFNFRISTRtK1ZwWjhoWGFTZ3I4OE8KT1lCb1Nsc3MvdUUvZGVJSzdnRUp5ZHlHYTB2OERZak85QlBhdnNIekRCQnEvMS8rV1ArR3VRcXZqZFprd1Bpcgp2emIzZUxJN05VRzRBN0FGNGtLRkRUYnh4Z210MjNSTFhETjB4eTBDRkxvaFVFem9GT0wzdXQweExITXNKZVhkCks3WUdwdFlDbUxTUXJuMnRTQ1dxandiT0d0YnFzZ2x0TjUxd1FqN1N0eDFFMFBBb0hhYWxScGJ1MjlkcXNZM1kKc3h4K3VzRkNCRTF5NitHenFuQkVMWFB4T1R0NWVCME0zQTJ1NDBQb1FnUlY1KzEwb1huL3pTd1NMd1doUmprUApMOC8rc2tBb2VrYkxxeVd0UkJBRmM2RlRRWW9abFZQT3d3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-15T04:07:22Z" lastUpdateTime: "2026-07-15T04:07:22Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-hmnxs" reason: AutoApproved status: "True" type: Approved