--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-23T22:08:00Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-05-23T22:08:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-23T22:08:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-05-23T22:08:00Z" name: system:openshift:openshift-monitoring-rxbsb resourceVersion: "8517" uid: c6399bf7-b3a3-4eab-83ea-718dc7270adb spec: extra: authentication.kubernetes.io/credential-id: - JTI=c7fdc0c5-ab9e-446e-99ab-28cd5e0d7290 authentication.kubernetes.io/node-name: - ip-10-0-140-203.ec2.internal authentication.kubernetes.io/node-uid: - e8c45842-4cb6-41d6-8b66-c3f86249eb2a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6c75959455-5jc9t authentication.kubernetes.io/pod-uid: - 5dbd7077-4a16-45ad-b07a-87afa5be59a4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 0d0a9754-565f-4ed5-a530-27617a40523e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZEEyV3FIYzVFQW80VDNRaTVzckNyakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qTXlNakF6TURCYUZ3MHlPREExTWpJeU1qQXpNREJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJDUml3MCtOUXgrRGhWZmFSQU8yUnlvcgplWHJuTEpqYzlwbzlkUVlpOWZjS3pzZUtqenk3Qmg2QmQ3Qmh1Q0lwZ1p0VDc2RVB4NkJrTWtMZTNkelQ3cjJqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUo3aUNvTVhCV1A3Z0diYkNOOEVwR2piWnYxTVU1MFdCcFFqbgpLNFhJRHZ4MzV3V0tBNUxUL0o2UlhXRGpvemFkMDZzQ3pyYnptd3I0N01FdEtmT2trekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQXRhZDNvMDJyQ20veXZWaC95NmVFNk14Y1NldzhYRjJvU2U2aERSbHlrRVgrMlpLWngwVzUKdW9tMEtHQno5TDM2bUJoTmx0dmZjNndsd1pEMXlDRTA2Y2p5WEdCalhQL1pPbDQvdWJnbFd6elJJeWhQck1CNAp5aUFqdGE0WjRnYlFMKy9rQml2SVR4TCtnaFJnb080M2lTT2xxZTRpbEdnUldLcXlRMHJ1UzdwZjVrc1h1Ukx1CkgwYnFBYk12NTUwRFFJZDJuQUx1N0Fic3BacExOaDIwSFZ6VVFKcmQycXkxMTh2d0NpdWt2N3NHVTF4WExjeGQKQkhUNHI5dFZvZjlralBYMkc4R3YvQkpsaXB2eGs2cVdQVGtIV1dCdVhRNFM0cXZkQWZBQnJSSXE1djJYeGFxMwpoMTFrLzJtdFpOdVVFZTByQWs0dExFRnpGZ2Q4RnB2dzRBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-23T22:08:00Z" lastUpdateTime: "2026-05-23T22:08:00Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-rxbsb" reason: AutoApproved status: "True" type: Approved