--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T19:40:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-30T19:40:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T19:40:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-30T19:40:30Z" name: system:openshift:openshift-monitoring-7kd6w resourceVersion: "8258" uid: bdbec74e-522a-4017-bd27-a8881155b883 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8cc83d4e-e7ca-497f-87ba-973748d7c708 authentication.kubernetes.io/node-name: - ip-10-0-135-254.ec2.internal authentication.kubernetes.io/node-uid: - f06ca528-8e8b-499a-be1b-5a7a8e095a71 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-hgm8k authentication.kubernetes.io/pod-uid: - ddfb3012-64c9-4a83-9a6f-c39b9e768cc4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 21239e42-a683-42e0-b64e-be2c63bd89b2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T19:40:30Z" lastUpdateTime: "2026-07-30T19:40:30Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7kd6w" reason: AutoApproved status: "True" type: Approved