--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T18:26:23Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T18:26:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T18:26:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T18:26:23Z" name: system:openshift:openshift-monitoring-ppj9p resourceVersion: "8337" uid: 12a92bcd-4578-4548-b51e-3e6fac1a4672 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6738bee7-157d-40f0-a98a-2360ec3c0b8a authentication.kubernetes.io/node-name: - ip-10-0-132-16.ec2.internal authentication.kubernetes.io/node-uid: - 1fe1753a-bf0d-429c-8113-56dbeead7d0d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-mgtjt authentication.kubernetes.io/pod-uid: - 78da3e6a-07d0-419a-9b62-0dfc4de5befe groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVDB0dFh3R2hjVExidFAzd0s0dVRnR2NJR0RKTU43OWFXVlpoU0d0SmxNL1RGWFhoSloKdWZEblBwblpQTndOc2FmRWNaazV3dERXODZFNkRnMG9lcjhBb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTWdjVUhGRmhwNW00eXpmLzNielBpUVNXWkN4NTZ0bjRaYnlIS1ZNdmFKRkFpRUFrVDlxTjdkZGxsa3NJVk9ECmMvU21mWFlDQ1FyYzVDUGIzemlqQnJZbVI3dz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 91dd27b9-0c8b-499a-9671-40b4dc9dea90 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T18:26:23Z" lastUpdateTime: "2026-07-13T18:26:23Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ppj9p" reason: AutoApproved status: "True" type: Approved