--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T20:58:26Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-07T20:58:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T20:58:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-07T20:58:26Z" name: system:openshift:openshift-monitoring-qj8zp resourceVersion: "8262" uid: 6d0e5575-f9d7-4bc7-b7ea-1f0acd9a3e70 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cf85be2f-e6c8-43b7-a33e-f9dfbccc329b authentication.kubernetes.io/node-name: - ip-10-0-140-24.ec2.internal authentication.kubernetes.io/node-uid: - 349681eb-bc5a-4484-8968-5c0625ccab2a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-jl648 authentication.kubernetes.io/pod-uid: - 69ac1738-084d-40e5-b4c1-0bfb0a28cc20 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c2de6866-658a-42a6-8594-9b13e7d8f084 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T20:58:26Z" lastUpdateTime: "2026-09-07T20:58:26Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qj8zp" reason: AutoApproved status: "True" type: Approved