--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T07:03:18Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-13T07:03:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T07:03:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-13T07:03:18Z" name: system:openshift:openshift-monitoring-s2rvz resourceVersion: "8354" uid: 2ce1a48d-477e-4dba-92d1-866d88b24162 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e50ec418-1b2c-4187-a8bb-e0a0e151d723 authentication.kubernetes.io/node-name: - ip-10-0-141-37.ec2.internal authentication.kubernetes.io/node-uid: - 02eb7578-c119-4027-ae5a-10530b3dcba3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-74xdm authentication.kubernetes.io/pod-uid: - 5b0bbb6f-a4f2-428a-8c0b-8561d031061c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 65e7ed6c-816b-4905-ad3a-1bdd9384b367 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T07:03:18Z" lastUpdateTime: "2026-07-13T07:03:18Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-s2rvz" reason: AutoApproved status: "True" type: Approved