--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T16:53:19Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-21T16:53:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T16:53:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-21T16:53:19Z" name: system:openshift:openshift-monitoring-8ff8f resourceVersion: "8403" uid: 537c434a-b17b-4196-97e5-8830406d6461 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6aef73f2-5e1c-4110-a68f-edab4a92b3ee authentication.kubernetes.io/node-name: - ip-10-0-135-101.ec2.internal authentication.kubernetes.io/node-uid: - 93f1b50d-d9e9-4ee6-916a-6a4fe8edc690 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-54zlq authentication.kubernetes.io/pod-uid: - 1b80bd91-e87c-4d96-86d8-34b1b4ac2b08 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5c50a1ac-0da0-4c43-bf2d-986f2a29b903 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU9XR0paT0VWUERZdGphbGpvUGN5MVV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXhNVFkwT0RFNVdoY05Namd3TlRJd01UWTBPREU1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVHEzNzAzNzJXSWtvWU1FMVdJMVlmbwo4amZDSmw3K0llNDhxWnJBR2RhcjJpV1M3SDY1NU42MGNRdkFKcjJKQlZYalZXU2VVcG1EQzA1eHhEQW9QOVlPCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFFSmRCZlZYRmtUZFR4Z09QZ3Q1cC9TMDhtYnMzem94dTNVRQo2TlhqU1ZzeFdJTkR0d0dTUkExTTFHSFlXT2laVTliUWJjYkFDamJPaVdwcWNxc1pOd0V3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJWXdiZVpyMjhVWVQzcWxYRENTTGFwSHNFSDkzRE5ydW00Z1VOL1d0U1A3Z29mc2s2YmsKQ0N0aTZzb00wK1FhTWhWUGhvaWIyUzVEczBBNDVJNW5TajB5eWJNUC92OEdnU0o5L21zQ09lbXI3Nll3Tk5KUwpPYjljY0lnMEF2VVJZNlcwdHc2RTJadWF5YUV2Nm9uMmd6ampUTHJMcE9DNUkvMHFzV0Z6YlFLUkFITWtEY3dsCkJteCtDNTlzQlR6OGQ0R1V6d2k3S3hKSnBDQ0lkaDVmc080NzhhRVB0bkd6aGNjVHUvdWdYSnEzNHJlc2padzYKZlFscmFMQ09SYVRxN1pWbDVlZG9NREQ3cVZTcGxySWhobk5NUHdIZysrY2MzblY5eldOQ2xTaDJyN29nSHZsZApMbFNwMHhLYkpKbnVSTHNsN20ya2ZvdTZyVG9ISnArNDJrTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-21T16:53:19Z" lastUpdateTime: "2026-05-21T16:53:19Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8ff8f" reason: AutoApproved status: "True" type: Approved