--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T23:37:57Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T23:37:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T23:37:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T23:37:57Z" name: system:openshift:openshift-monitoring-2k8mg resourceVersion: "8483" uid: 0405c5f5-3a9f-4f2e-bdd1-d95130717504 spec: extra: authentication.kubernetes.io/credential-id: - JTI=15cee0cc-608e-40b8-830c-0d4a4d1594b9 authentication.kubernetes.io/node-name: - ip-10-0-142-203.ec2.internal authentication.kubernetes.io/node-uid: - 26528f14-8d73-475f-9c45-4e7986144e43 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-vnp66 authentication.kubernetes.io/pod-uid: - e16b04e5-d4a4-40e5-8479-79295c0c2ae1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: d48f8e2e-aeb1-44f1-8c8b-c0ac364aaeba usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T23:37:57Z" lastUpdateTime: "2026-07-27T23:37:57Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2k8mg" reason: AutoApproved status: "True" type: Approved