--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T17:55:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-01T17:55:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-01T17:55:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T17:55:44Z" name: system:openshift:openshift-monitoring-sd47x resourceVersion: "7843" uid: ea5b9087-ae26-4ab0-8438-41876f209a1b spec: extra: authentication.kubernetes.io/credential-id: - JTI=79f63d57-d300-4120-b048-6503bc5308ac authentication.kubernetes.io/node-name: - ip-10-0-134-6.ec2.internal authentication.kubernetes.io/node-uid: - 912a9549-268a-4dcc-8563-e3a10e8c85a2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-54cb84584-fv6ll authentication.kubernetes.io/pod-uid: - 5748c233-dc0f-4c43-a1cc-b12872840369 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 03bdaee8-88c6-44c7-ab6a-794f23c26aad usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T17:55:40Z" lastUpdateTime: "2026-07-01T17:55:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-sd47x" reason: AutoApproved status: "True" type: Approved