--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T19:47:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T19:47:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T19:47:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T19:47:56Z" name: system:openshift:openshift-monitoring-x9759 resourceVersion: "8502" uid: 446d4510-64ad-4fa0-8e26-54f1d9431532 spec: extra: authentication.kubernetes.io/credential-id: - JTI=8eef02d1-46f7-4983-9bb9-77a90153c674 authentication.kubernetes.io/node-name: - ip-10-0-133-160.ec2.internal authentication.kubernetes.io/node-uid: - 84f81e1a-1728-4214-a5d4-4e851bdb90e8 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-j8m4d authentication.kubernetes.io/pod-uid: - f985925d-7690-4f3d-b33d-d12804131a78 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c648e1e3-2fa4-4839-a467-874e031f5830 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T19:47:56Z" lastUpdateTime: "2026-07-28T19:47:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-x9759" reason: AutoApproved status: "True" type: Approved