--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T19:56:10Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-15T19:56:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T19:56:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-15T19:56:10Z" name: system:openshift:openshift-monitoring-l5p6s resourceVersion: "8430" uid: 9dcb92bc-8b8b-4b8e-add7-af98ad4955af spec: extra: authentication.kubernetes.io/credential-id: - JTI=57a84859-f5d2-48a0-bcfb-142eb8b8409e authentication.kubernetes.io/node-name: - ip-10-0-132-12.ec2.internal authentication.kubernetes.io/node-uid: - e3c935fe-7f90-4441-a783-048816b4a6b0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-gqj67 authentication.kubernetes.io/pod-uid: - 6d0326db-fe6e-4e6f-b8bf-fb8303d78358 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 942f3623-f296-4a77-bea0-c813e3806726 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T19:56:10Z" lastUpdateTime: "2026-07-15T19:56:10Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-l5p6s" reason: AutoApproved status: "True" type: Approved