--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T21:10:42Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T21:10:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T21:10:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T21:10:42Z" name: system:openshift:openshift-monitoring-9g5rs resourceVersion: "8211" uid: e51069d8-7fbf-44e6-a56d-0b2b527296b6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=57d8c98d-1d6a-42fa-a3e6-f81cc22c738e authentication.kubernetes.io/node-name: - ip-10-0-132-95.ec2.internal authentication.kubernetes.io/node-uid: - f538faaf-2882-4194-bbdb-3ce03f1aacf2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-9tgkl authentication.kubernetes.io/pod-uid: - 82ef6627-388a-4cc4-9445-6545744d96ea groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: f60540b4-d5f2-40be-b421-54979de6fcf2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU9yZmViaFlIZjRBS2dBMGRxd3R0Vm93RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTJNakV3TlRReVdoY05Namd3TnpFMU1qRXdOVFF5V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVGlwSkFzS0ViZmJXbFpScmtwQk1VVgpSR0ZUY2lqRkZwQ0xhNngzWTNtaVRSeFQzR1U5a0N0OWs0SUl0KzRpOHVST05CbEMvT1U0bTdjd1N1bkFCSEg2Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFPZkhIZGxKOEhZTW1MbmlqbkdIaWhMaE1tUS9OSVFobFNJcQo0SG1JZk5IRHN4SjA3S0lRZUkvV0tKNG9jTXdNM1JXK2tQUnNUZUlyVnJLZGpIYTYxcE13RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJeHNqSUl3TE96SXVoelZrUE8reWVSdGp4cW5qL1R4Tm9YZjZVTTBQaUsvaVNVUWlaMFoKeE5zaTJBTzNpaHlwcVlBNjB1NUJMR1BPbkUyK2RDR3RwK1lLb3oyZGVDRHJwNzFyL0tEUFg0MUhydVE0UUQ1UwpUaXowUDZqM2NaMHJndCtjdG5XTjU1SG1tbTBvU2xQMnVEQ2NyakhJRm1CR0wrN2EvRWNlTk5QUXhJQmg1VEg4CmYvQkV4N3Z3ZTFENXplb2dPQzJIaFR4a2tpZzJqenQzSGdUU1dONUZaVlQvUVR6c2tBQWtZZjF3VzlWbEYwUGkKWk42N0lSQUtzdkwyb2NrY0JjUm5GOE41RFNlUkZGSTZYTGZnM0Q4d2ZWakxGc0ZRdjd1dWI3KzVYeEVEazJydAorb0hJOTZuZE1FSTVLM2xZOVhNK0ZMVzNaNjJKZ0EvSFB5RT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-16T21:10:42Z" lastUpdateTime: "2026-07-16T21:10:42Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9g5rs" reason: AutoApproved status: "True" type: Approved