--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T15:14:05Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T15:14:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T15:14:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T15:14:05Z" name: system:openshift:openshift-monitoring-76ctr resourceVersion: "8340" uid: 2cf9fee7-aa4c-4fe8-98ba-6f0103843c5e spec: extra: authentication.kubernetes.io/credential-id: - JTI=558039f1-2cdd-41bc-9b0e-641502413b06 authentication.kubernetes.io/node-name: - ip-10-0-136-36.ec2.internal authentication.kubernetes.io/node-uid: - 539cf54a-05de-4ae5-895b-feb3791eeef6 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-q77xk authentication.kubernetes.io/pod-uid: - 772076b4-2a6b-460e-ad04-f7fa0cf2be3c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: cf072592-3f85-4aea-8822-bb8e9131c4ca usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T15:14:05Z" lastUpdateTime: "2026-07-22T15:14:05Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-76ctr" reason: AutoApproved status: "True" type: Approved