--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T00:22:30Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-09T00:22:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-09T00:22:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T00:22:41Z" name: system:openshift:openshift-monitoring-8ptx8 resourceVersion: "9021" uid: cba75ae6-2aea-4ff2-8e23-3ec9f381be17 spec: extra: authentication.kubernetes.io/credential-id: - JTI=4d1e3325-a6d7-4e05-9309-b21372367914 authentication.kubernetes.io/node-name: - ip-10-0-128-241.ec2.internal authentication.kubernetes.io/node-uid: - 483a519c-5757-4fe5-8a98-a901fbdfb614 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-j5qlg authentication.kubernetes.io/pod-uid: - 21bfad55-eb45-4913-b6ca-749a60447d8c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJCNUZhVFZ1ZEh6dGJvV2JlZk4zZm9FWGJUL1haTUFBOTJQc2JBMWJiOUI3endZaW1mYXQKY3NtM2s2SHU3THNZRE80VngwbFpEczFRT3B0YkRkNE8zNWVnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCaQpTMjVUUjJUekdoUmJvcDNWUDlmQkYxZ0dBZWl3SGNqNWNCb1gyUUwyNndJZ1BzT3dtcU9TdEdiV1BGa3Zha1hGCkdtQjc5bmpwNWZFUUZEV01zZElrZUM4PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 02a1b7a0-15c1-4803-a6ac-7ed38c36bf00 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T00:22:31Z" lastUpdateTime: "2026-06-09T00:22:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-8ptx8" reason: AutoApproved status: "True" type: Approved