--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T20:48:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T20:48:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T20:48:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T20:48:55Z" name: system:openshift:openshift-monitoring-kfjtg resourceVersion: "8213" uid: 9482df53-271f-4f6b-9643-3a79a5ca6a9b spec: extra: authentication.kubernetes.io/credential-id: - JTI=bb5e0337-3b65-4d5f-af3e-8308a354fe69 authentication.kubernetes.io/node-name: - ip-10-0-134-170.ec2.internal authentication.kubernetes.io/node-uid: - 341dd59f-6f2f-4fa4-8f37-16f114cd9bbe authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-rvtwd authentication.kubernetes.io/pod-uid: - 18a1dfd7-9d6b-4bb8-a22c-956fca90189d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 802eb0f3-60e2-4f31-84bb-dade345c8e06 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T20:48:55Z" lastUpdateTime: "2026-07-28T20:48:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-kfjtg" reason: AutoApproved status: "True" type: Approved