--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:04:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-02T19:04:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:04:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-02T19:04:48Z" name: system:openshift:openshift-monitoring-vcg9g resourceVersion: "8459" uid: de2c6b34-e427-46a4-8e8c-fc6a3868aa1f spec: extra: authentication.kubernetes.io/credential-id: - JTI=96c98ff9-c6b4-4b31-b305-0a316a8f9eda authentication.kubernetes.io/node-name: - ip-10-0-137-48.ec2.internal authentication.kubernetes.io/node-uid: - 2149eb01-2e98-47d9-8d0a-722fd300a3a0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-dn2gj authentication.kubernetes.io/pod-uid: - 833e3390-fa45-4e04-8918-28a52e92bf18 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 171b114e-8282-42c3-a514-9a75047b84b1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:04:48Z" lastUpdateTime: "2026-07-02T19:04:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vcg9g" reason: AutoApproved status: "True" type: Approved