--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T23:11:04Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-11T23:11:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T23:11:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-11T23:11:04Z" name: system:openshift:openshift-monitoring-gf5v5 resourceVersion: "8461" uid: be91f116-8d7d-409d-9391-60032da3f32d spec: extra: authentication.kubernetes.io/credential-id: - JTI=968875a6-623c-4f13-a23c-7f295fdd7552 authentication.kubernetes.io/node-name: - ip-10-0-131-227.ec2.internal authentication.kubernetes.io/node-uid: - fa72b23a-0cfb-4c29-a202-e71097388714 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-hhfkj authentication.kubernetes.io/pod-uid: - 3731c35f-511b-4048-882e-2a9fbc32d707 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: a30e7123-414c-49d9-9eef-bea764fda52f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUxNcGFQRkdISkRYZUhXaExwM09qQWt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXhNak13TmpBMFdoY05Namd3TmpFd01qTXdOakEwV2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUS9TREJNQTBVb1VhRC81WThtaGJSOApSMmJGNk1BUjJjUGVESlJ5UVNBUFdZb3MwdEgySkRvTk5ZWERZM2VkcGppQjRielRWOGNFUVYyQ0xZN095K3l1Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFCcEU4UEZCZWI2U3hWWEZCOXBQVU1zS2lyYVFLUUMyRnlEcApVWHB0NlhHNTBNaEV2eGsvTGNmYzNnckh0YjlGTzdtY0hPZHpTVmxFaWE3bE5MSFBnYTh3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDek50NWJ4TURNNDhpUVlPMUJubDBOM0dkNmNmMXhyeEJWSEc4UWlGRjFLUkpzMTJZODYKamk5S0ovSGhzZzN0djdhREc2ZncwRE5YMFlVdzBIcjgveFZkV3Y2ZGhKQ1FadkZzOHhDcnRtaXFHYUppRHB0cAp6UU5wVlc1QlJvVXNTOHRncy9vUFpUMDJhK0xvWHZJVUxMU21jMERLWEpWWWtYajQycy9ZL0xaL3VtQWNkV2duCnVaVnVPcWtidFQrNUdGQlcxRmlabElmbVFpVklCQlpCTVg1Y2V2NllkZ1d4OG9QTXk5L1BsWVZPZm4zSTlrU0EKdTFGcVNrbmZNaUZ3cllOSk5DNzFwRUx0c05zaG95MEhaTHI4cnRMaHF1Sm9UUG1nUlhyV000Y2ZueXEyRTB4dQpMTVh5Tll6VVNWdTc4WWZKT2lYdnNFa0JtL05sMVlDUFFmUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-11T23:11:04Z" lastUpdateTime: "2026-06-11T23:11:04Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gf5v5" reason: AutoApproved status: "True" type: Approved