--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T03:36:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T03:36:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T03:36:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T03:36:58Z" name: system:openshift:openshift-monitoring-zzrwj resourceVersion: "9352" uid: acc970af-c3bc-4919-94dd-1ed4ee4a82df spec: extra: authentication.kubernetes.io/credential-id: - JTI=56395bf1-8c23-43d1-8bdd-d6ce5084c7e1 authentication.kubernetes.io/node-name: - ip-10-0-129-177.ec2.internal authentication.kubernetes.io/node-uid: - 2c57d21d-fc11-4032-ad74-6f1671eca616 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-dd799 authentication.kubernetes.io/pod-uid: - 573b4db4-bd46-49b9-9221-54ed2bf71644 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJBMWptN290WU9Bam5PNG5odTFIbFNkNUpvczkvRm1VMUNYRGZJeUZkMkpvY3lYVHJzbkEKbTRQckczbXdRN2svSkRXcXllTm9WVU1rRkplZjJtNU9PZnlnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCcwozN3RsSXZ1VjBwakkvSTAySVF1RXI3MnNibVNpc3ZLUXhXYkQvMFY3bEFJaEFNcnFHRjF0OHVTVVpYUGFkSWRsCkR2RHoyc0xoNDlzU3hUSWNJYlYxVHFHcQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 7481d710-655b-42f3-aca2-53ad441ba6c0 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRS010dUpvZ1ljZzRoclF4NzhHYTBUekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UQXdNek14TlRoYUZ3MHlPREEzTURrd016TXhOVGhhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJBMWptN290WU9Bam5PNG5odTFIbFNkNQpKb3M5L0ZtVTFDWERmSXlGZDJKb2N5WFRyc25BbTRQckczbXdRN2svSkRXcXllTm9WVU1rRkplZjJtNU9PZnlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXdwT3N6bm9NN0xtTzFieTI1dUlWZHVqbnlFUzVXVVVwd2ZLdQovdHJNTFdjRDNBdXI1a1ZtTnNjdGIza3MyM3NZYTI5bllOQ1FxNmFPT0JJODRuVFo4akFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWd2WFJyMDR1MjE5VEk3NC9xMjdHa3JYQlZNMUNXSmhRWWFUSVk1eUtDNGNsQ3lBVEZwdlMKL3ZMRGhuaHdUM0NyekhiTWJvY1l2ZjNQbFFPTHl3YVFxYWZxSEtrZjVPNXJqaC85SG5oOXlBTFpWcGdQL2VERApRZWo2bnJlN0JHYlZuVjNsSWd0cEFOYjFsTWpsWjN3aHB4RkVpaVNGUjV1ZCt2YnhoKzl2VER6MkE2L204QU1zClFpTTQ4NWlUeGE1dTFrNnZzYjF0TzZScjJkTUJvbGlFSkJtSnhXUG9NMjdPa2dUajFiRmFsaTV1czcxRTFNQ2UKWHVZTWRtdm9qWDdOckVHOEtIaFlPRXh3UnFud2VTdXRLZ3hOSFNwQkFHTTJvM0ZBR3Vyc1RrWUdJdTBhdXduWApURUp2ZSt3K01DdFJ1WEF1TjVabGtLYkRsODBjUmVTbW9nPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-10T03:36:58Z" lastUpdateTime: "2026-07-10T03:36:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zzrwj" reason: AutoApproved status: "True" type: Approved