--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T15:24:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-12T15:24:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T15:24:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-12T15:24:51Z" name: system:openshift:openshift-monitoring-8gh4d resourceVersion: "9374" uid: 46c5c1a8-ca5c-4b49-a654-9737d3c6dd8e spec: extra: authentication.kubernetes.io/credential-id: - JTI=b408f231-c866-49d9-9cac-60dda1f69737 authentication.kubernetes.io/node-name: - ip-10-0-136-30.ec2.internal authentication.kubernetes.io/node-uid: - 3c52a63a-6ba3-4a3f-95a7-e770ee126970 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-jdjc7 authentication.kubernetes.io/pod-uid: - 44f318e0-6b39-4c0d-b348-afe3f1e3c05b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a94d0c15-bb33-42f7-81cc-7abe272aadad usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU1aQjFNSDRITXpkSHhRejhPN2RUV0F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXlNVFV4T1RVeFdoY05Namd3TnpFeE1UVXhPVFV4V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUURHd0JBYTQwMHpCL0pkeUJkRzJnbQp5VHNQQnJnOEhjS2Vkbkhya0Zya05ZMlRDZzUvSHhNcjZKZ1ZadmgvbGw0d2IvSXJnUzR4K3o5YkxzOTJxU3VrCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFDeVNRVy9TMkpHTFlMVGhVUGl3RFhrdTBkRU9RazBHNXMrNQpROUdISUNzckVXZmdjV01SNzBRQmJvV1FJWnBZVmtNZ0p1WFRscE1jeUlHcU42Um14aEV3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFJRVliWHRlNk9NZ3pUL0xrdGJtOGs4RHd2dmdXNUZNMVpzY2VXZnU0aTRDU3MwZU1zcnkKaW9XaisvR1lzL285aGw2TGxZdjI4dGdyNnBiWXBTb3FFcVRPb1pvcEVGV1MrbklMMHBqcS9jSTUzdGhCZVNjagpyVm1NK0FnRHhMSjRrU0N0QWJTeEVlZTBLOEFmTTB3amJNRDFaQ1J5Y0lWaHpTZkdEVFNlT0F6NkMySWJrRDJtCmd5VFF5UjNjMkt5eUZFVFBYU0F0NzZQbWlrRG5xZ1J0WGxjRFA4Znp6eFA4WXViTlpxVXBzaEtPZitBRFVzWisKcE9HNjZPVWtiWkIrTGVMV25HNFFkOEhDbVdmTkZ1anpzcHI5NUxZNXNvYjhMWUJEYUUrNlVmaE1sa3dDd2JtQwpDR0NRY3Q4cStCRUFUcDhVcmpzenJuQVhHS0dScGZqSDVqaz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-12T15:24:51Z" lastUpdateTime: "2026-07-12T15:24:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8gh4d" reason: AutoApproved status: "True" type: Approved