--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T18:59:32Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T18:59:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T18:59:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T18:59:32Z" name: system:openshift:openshift-monitoring-6xn5z resourceVersion: "8250" uid: 6520f0f8-952c-4153-8f25-d37b36da3344 spec: extra: authentication.kubernetes.io/credential-id: - JTI=de716191-27b2-4e06-89d4-9dbb819e6e12 authentication.kubernetes.io/node-name: - ip-10-0-133-70.ec2.internal authentication.kubernetes.io/node-uid: - d8703970-a39a-48e7-bc4b-c3c9404c2959 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-6tnch authentication.kubernetes.io/pod-uid: - e8dac37f-f511-4f56-9746-827c3213809c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6bc3d40d-756f-471b-ad79-ea88b8fc6b40 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T18:59:32Z" lastUpdateTime: "2026-07-13T18:59:32Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6xn5z" reason: AutoApproved status: "True" type: Approved