--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:20:39Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T16:20:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:20:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T16:20:39Z" name: system:openshift:openshift-monitoring-7v4mh resourceVersion: "9480" uid: 6ab62bda-5000-415f-80ab-816108e9ffd8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c7e1e521-3892-4c72-a3f3-df526f79917f authentication.kubernetes.io/node-name: - ip-10-0-140-63.ec2.internal authentication.kubernetes.io/node-uid: - 1e44d4c3-2e78-41a5-9b9e-877b5a7b28fd authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-ln7nl authentication.kubernetes.io/pod-uid: - 62a95ae2-9f8b-47db-bcf5-afaf445907b6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJEaUErN090czZQSisrSTVTMnRmSllPdjBIQ2RNSTg4SERaSHR3SlJ5SzF1dTh6SWRBTjUKN3V0cGFnRGc5ZXpabjBOclRob295VDN1UG1tSGNERDdmYnFnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCSQpoeS9YNi9XTlNUeEhyYXdJd2JhWXpPSGYycVkrTS9NN3RWbW91REFFNndJZ1dmWDNqNkJNQXJ1c3l1dExYNWVYCk4vZlBtQ2VFTTRqT1BaYWZoUFEzajA4PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: a6a6ac5c-a32d-44c3-8a0e-ee8d53017317 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQVBsRzFYd21qZU5SMi9WdGhQeUl4NWd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXhNVFl4TlRNNVdoY05Namd3TmpFd01UWXhOVE01V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUTRnUHV6cmJPanlmdmlPVXRyWHlXRApyOUJ3blRDUFBCdzJSN2NDVWNpdGJydk15SFFEZWU3cmFXb0E0UFhzMlo5RGEwNGFLTWs5N2o1cGgzQXcrMzI2Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFBUHJGVVRlN2wyTkJuYnR0MVlUWDg5TGFZbUpSdUs0ZnhFWAo0OVNoTFNETnRhQlhnUm9CK0wwcnFyVHplWHdOdUlIcFNBQ0ZwNlY4SFNKRDZIZEpZMDh3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDVGptdmNJMU5QejBMek5XVXIyTzl6MDhHS0Z6dG93ejl4WkZNR2F5dy9nUGlmODc5cmEKNkhxSTBuMUVRSEVmNWUvZm56T3YvSnlSRkt2R2VadEg1TDZDV2tKSW1qSGs5dGFoZzE3UFVJVmJCOVV5bkFwaQpINkN6enRBc2ZZZE9seWs1TU1RYm14dHV0dlMzYzMwMy9QV3I0b3BvaFhTSDRrbFdWR3dPaTVudzZBZ29PUFFyCnFQaFZKeVYxbmFKYStxdXlrcTUvV3lXalBjNm94UDFwQzV0RXVER0pseTJPQi9jY0R2UHhMY25wK3h0cGtSMEwKZ3l5TGlBZXN5MVJrZE12dzhVQ2FXUWFmd2NPSGJVZW5zTllBY3VTTGpFT3BSbUttNW0xZDRmajBmeDZTRXV4WQpjNGM2enNCRWpESFZ1eENQbEpmSWpZKyt2YmpUc0VRT004UT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-11T16:20:39Z" lastUpdateTime: "2026-06-11T16:20:39Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7v4mh" reason: AutoApproved status: "True" type: Approved