--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T03:21:18Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-21T03:21:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T03:21:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-21T03:21:18Z" name: system:openshift:openshift-monitoring-4rsld resourceVersion: "8172" uid: 83f9308b-6512-449f-a094-d6a6582d9b5b spec: extra: authentication.kubernetes.io/credential-id: - JTI=c25d90c2-59ae-46ad-8124-5388c7db2cc1 authentication.kubernetes.io/node-name: - ip-10-0-128-161.ec2.internal authentication.kubernetes.io/node-uid: - ddfc8cd7-98b3-4207-8df0-b38ba590b588 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-pmfdr authentication.kubernetes.io/pod-uid: - 234c46ba-e4c6-49c1-b967-283befa2e01d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6e5e7dac-63a2-465a-b747-fc35b39efb3a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRQ0hKS25PUkxERUlmVmIzWnFDSWQ0VEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qRXdNekUyTVRoYUZ3MHlPREExTWpBd016RTJNVGhhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJJN1U2eFFoMGpJMTN0cE4yVmZ0TTNudQpqOU4zdmNuN2JielNsNEtLakVvT3I3K1NhaTVhMzdlVEVlZExidXFDTEJTZTlDQ2kzWUw4T0ZnZXVqcnYzbENqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXluTnY4OVl1VmY2aisyeDRTV244WjMxNEN1eWE0Mk8vR2pPUQpJZjU5bE10VFBCMFhicnRpYUdYOXI1WXFJaHgxRUZTbUFBWU0xUEUzQ1VPSXRNNVp5akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWk2SS81VXhZY1l3LzJYN3BNYlVpbDlEa29JTElxSFlFVDUvNnVXYVk3QkVFUVR6VDVSbnIKaGpPRkxwcjloUzlqM3ZIcXg0MVFFTFFTVTJJOW5oZjRwdU1YSFFraHNhY08xNU1vZnRrakZhMVk2V1Zob3ZHTgo4TEM5RHpqMHYvWTZQaU5iQ1VIV1lUdWNha1R3UFUwMkJoM2N3dVZjcUtjS1NrS1p4OXJsZFNxWWVETlBIRWo3CkZSUHJaZ25iRlpUVzJBQVVZSlBHdllJWEo4a0Q1VnYwMWlIQk50ektsYU9jYUUvUGZieDhaV0VESURta3VQTUUKY21hZkUzUTAzTjVuZ1pSR0w0WVFqQnVYN2dTSnU1N3FlcUNXWnNYQWFtTHlqMWU4bitTd2gvRzdnaXkvTGpUMgpDYkhsV2xDYUwzWGpkVmVGcG9MRnVGdWlTeTZGWmxad3J3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-21T03:21:18Z" lastUpdateTime: "2026-05-21T03:21:18Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4rsld" reason: AutoApproved status: "True" type: Approved