--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T20:06:27Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T20:06:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T20:06:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T20:06:27Z" name: system:openshift:openshift-monitoring-7mtmz resourceVersion: "9435" uid: 39ce0d68-e920-4172-808a-6ef9172102c0 spec: extra: authentication.kubernetes.io/credential-id: - JTI=2e74472f-c4d4-4daf-b386-e58d5dd637da authentication.kubernetes.io/node-name: - ip-10-0-133-202.ec2.internal authentication.kubernetes.io/node-uid: - 07e3686c-37ee-4955-8029-48fd35ee3aeb authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-kb6zg authentication.kubernetes.io/pod-uid: - 2ae99fb0-484c-4c13-bcd9-20e7546fe9e2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2e161e00-99b2-49c6-b7f8-f7981e4b39e1 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T20:06:27Z" lastUpdateTime: "2026-07-22T20:06:27Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7mtmz" reason: AutoApproved status: "True" type: Approved