--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T12:06:47Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-10T12:06:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T12:06:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-10T12:06:47Z" name: system:openshift:openshift-monitoring-vxgpz resourceVersion: "9184" uid: 79009789-9c54-4edb-b525-ba84114aa372 spec: extra: authentication.kubernetes.io/credential-id: - JTI=29ad967e-a3a9-432c-aefe-c7d19f4f8019 authentication.kubernetes.io/node-name: - ip-10-0-143-32.ec2.internal authentication.kubernetes.io/node-uid: - 3813e4ae-2de8-4c15-a0dc-cc5034d0c2f2 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-2dlgm authentication.kubernetes.io/pod-uid: - 76ff5d25-7211-448b-81d5-b9d082c6d06d groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cf6c1069-a0a9-4422-bca8-0d910e47cbdb usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T12:06:47Z" lastUpdateTime: "2026-06-10T12:06:47Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vxgpz" reason: AutoApproved status: "True" type: Approved