--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T08:23:06Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-15T08:23:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T08:23:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-15T08:23:06Z" name: system:openshift:openshift-monitoring-vth2x resourceVersion: "9684" uid: 5cfc79aa-f359-42d8-9aa8-5c0e7d457ced spec: extra: authentication.kubernetes.io/credential-id: - JTI=e101fa72-b18f-4971-91f1-30097ac07993 authentication.kubernetes.io/node-name: - ip-10-0-136-100.ec2.internal authentication.kubernetes.io/node-uid: - c05a599b-5774-4f7c-9178-fd65888fc31a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-b6h2z authentication.kubernetes.io/pod-uid: - 13e56429-0be8-4d84-8f41-dac0aa356f6e groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJNMWtwZHNqVmhudloxcnQ1TG9wVWZwekNYV0RtdzdiUHA1bmtrS3h2TnIzTnZGSFlGR3AKQUxOL0JuM2d0cjR0a29DaklDQVRINm8wVDRHNURtRWtzN2FnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCcQpkQzRrN2sxNk5MWWxoclhmdWI5dC91djVVL3NHRmVtU3dlcE5mL0xWS2dJaEFPUFdVK3ZMeWZIV09GWm1ZdWRCCjdjZGVvcjhzUWRDTUpPRDVYN1BQYkNjUQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: b4febbdf-733e-474f-bb60-435c6b5bf611 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T08:23:06Z" lastUpdateTime: "2026-06-15T08:23:06Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vth2x" reason: AutoApproved status: "True" type: Approved