--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T22:50:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T22:50:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T22:50:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T22:51:12Z" name: system:openshift:openshift-monitoring-pf98f resourceVersion: "6887" uid: e8a09cac-8682-4423-b225-3f084240328d spec: extra: authentication.kubernetes.io/credential-id: - JTI=f119bc84-88f1-4efb-8ad4-480aa1ccb71e authentication.kubernetes.io/node-name: - ip-10-0-141-83.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 4be09232-71cd-4f9b-b40b-2df673f7b8e4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-6f6mp authentication.kubernetes.io/pod-uid: - be148fd2-36b2-4f0c-a2cc-5b238ad926dd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2e6e5d73-049c-48a6-abfa-14176e349603 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU9zajY3RGxoOHQxRG5QMnlIU2F3aTB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZeE1UQXpNakkwTmpFeVdoY05Namd4TVRBeU1qSTBOakV5V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVEZ5eEE0aHRIYTQ5S2Zid1pGc0NlQwovWW1hRVJ4NkVreGxaY1ZBREJnemhwMmhZVlBrcHlTaERCQnpqUnJQQ3VrWldFK0hmbUdubVcrZHI4MVZ4emQwCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFFNnByRjd1MVowQ3pNTTdoRWtjTE9XVlR1ajZlK2g0RWh5QQpsSTNUUW9zL3YzeURhWExMcU1tZjJFcHYwdGk0dTBDeHdtbkVGb3RyMGZyQTRPSXBOb2N3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFLVEZOWG9mOVRQSnhMb0pIaXlMTGhyQW9reTAwTTdiTEdjeWdNMVFnWWp0blJVNWR1ZHMKWkFaaUZhdzV6RnFPQTNISENrc2RtWWMwVDQ2ZVFCUlB2WndUL2s1Y29jRDVxVE5TVUFJTENwQ3luTzVtOFBNVwpiWkM0bnZiTC82Vzl5S0hIRThiSXJ0ejhmTUwyZjVJUjg2Q1djWEVkTGVYZnVVaWExYTBrVC95RmRLK1psV1pECmp3TGw1aXAyTGF1NVpZSnlZL2g0TFlHdmpsbkVkMTZEQlVWd3dHcG5iZzgvS2JUWmZ3YVZ5VCtFZ2dJbVhOaEcKVUtCM1BBOWJPZ2k0dkpBMnU4Ris2L21xUWtETVR3Z1NnMkgyNFZ6ckFrUmo0cTBDcGtyWUdQeHJqd3pPRTB0dQpPd0xJeHlSaHhRZVd5bTQ1M0hIWjBIbUhjS0xwbmpvT3RyTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-03T22:50:57Z" lastUpdateTime: "2026-11-03T22:50:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pf98f" reason: AutoApproved status: "True" type: Approved