--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T04:54:37Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-16T04:54:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-16T04:54:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T04:54:44Z" name: system:openshift:openshift-monitoring-v8hvm resourceVersion: "9153" uid: 664abd78-e9e7-4abe-a7cd-5452ecb84684 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d20cdbfd-3cea-4bbc-93b4-973dfc93ca96 authentication.kubernetes.io/node-name: - ip-10-0-138-199.ec2.internal authentication.kubernetes.io/node-uid: - 513327da-c69b-4866-857d-5dcba4978a3d authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-k6lpx authentication.kubernetes.io/pod-uid: - ba263a6a-62d7-412e-9459-04f53586cdbb groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJGVCtLbVhpdUdESlZRY2ZrdkMwanR5bU8wVHNPYmdxa3ZwOUNUenA0UnErSTF1bzdYRGoKN2ZKcVJ4Z3hvSUU5Z0g0OW4zZW5DLzF3ci83WUw2L1FkNCtnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWg5VgovUmo4eXpwaTROU0pGbU9JVU50R0VqZ29XSEk2QjRGeC9VTm5sK2hpQWlFQWc1YjVGVkJLTll6ditCUmxBV2wxCi9UZzJIcm5MMFNralkwc2Y3Nk5ISUVzPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 8fecfefe-0e55-4bb1-8e91-b3f512ae193d usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T04:54:37Z" lastUpdateTime: "2026-07-16T04:54:37Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-v8hvm" reason: AutoApproved status: "True" type: Approved