--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T00:57:34Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-03T00:57:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-03T00:57:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T00:57:41Z" name: system:openshift:openshift-monitoring-4ffb4 resourceVersion: "6671" uid: a622805b-c65d-4bda-a329-aad8b47b5d05 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5f617a91-166f-43e1-9464-e37cfc1ecd04 authentication.kubernetes.io/node-name: - ip-10-0-131-227.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 3f33e5f3-e6e7-4130-a8d0-a335a4343b80 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-89jdv authentication.kubernetes.io/pod-uid: - 35fbbe37-38bf-404a-bc84-1eced2215cf8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 83d9bb46-5ef6-441f-b9e1-bbea13075e59 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T00:57:34Z" lastUpdateTime: "2026-11-03T00:57:34Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4ffb4" reason: AutoApproved status: "True" type: Approved