--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T19:18:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T19:18:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T19:18:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T19:18:44Z" name: system:openshift:openshift-monitoring-ppvgl resourceVersion: "8584" uid: 98c6c917-220e-44fa-818e-573205f35c29 spec: extra: authentication.kubernetes.io/credential-id: - JTI=27fe5d31-c4e0-4b20-bc5d-118e3fd543d1 authentication.kubernetes.io/node-name: - ip-10-0-140-204.ec2.internal authentication.kubernetes.io/node-uid: - 8fe468df-7967-4c82-bc59-89fdde16ef8c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-ghm2l authentication.kubernetes.io/pod-uid: - b81d897c-042e-449b-a56f-333ab4d4728e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUVQ2SGNUYUZ2R3RDcmNVejRjWXhnMDdBVTdWQVNPV2RJNXpEanNhRCtnQWg3cHdPN2wKV0VSVjlNamI3Vm53OFlNZE9kc2ZrSU11MjJTbVdyNzZXUkhvb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTTF1WjZjYmtwZVlYa0hZN0ZRN1ZkYnNKK3VmeldnQnNhSm83bHRsRWhuUEFpRUE2MElwaklZdnlUSXlTWlZjCndpOUM2bkFjTlB4TkowQlNjeTF4R2xVSkFvbz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: d9794b1c-7f20-4da6-a0f3-8c937061ab05 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T19:18:44Z" lastUpdateTime: "2026-07-29T19:18:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ppvgl" reason: AutoApproved status: "True" type: Approved