--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T19:28:55Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-06T19:28:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T19:28:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-06T19:28:55Z" name: system:openshift:openshift-monitoring-rs5n7 resourceVersion: "8596" uid: 4a3f156b-59f5-4f70-af52-fc869c3c8203 spec: extra: authentication.kubernetes.io/credential-id: - JTI=ccf93e2a-7f7e-4b01-a191-81fc7d2c1793 authentication.kubernetes.io/node-name: - ip-10-0-135-174.ec2.internal authentication.kubernetes.io/node-uid: - 57cfdded-e115-47dd-ba0f-ddbc6eeb1181 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-r9x9b authentication.kubernetes.io/pod-uid: - 51e9c3ec-c5d6-46e0-b9df-65b9ad1c3808 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJKb3F3THVHcGRTY1pIZ0pnd0k3M21ueFZtQ2h5c0ZMNDArVmtrTi80NUtGRzlUcTV5dlIKTjFuZ0luSFFiSkZYKzBnWGVrYTVyTldrODJmcXB6MGoyR2VnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlBRApQaDVJa0ZBalZVaFhqVHJuVFEySG94cVlhazZaTGtQUEZtQlkyVkFrdndJaEFPaktWNW5BOVRVWTZiSVhvNEptClkvOTAwd3FzUVpZdlZCOEVXaGFjK21BdwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 824b8705-a7ca-42be-99a2-70cfe170fd5b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-06T19:28:55Z" lastUpdateTime: "2026-09-06T19:28:55Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rs5n7" reason: AutoApproved status: "True" type: Approved