--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T22:21:12Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-12T22:21:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T22:21:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-12T22:21:12Z" name: system:openshift:openshift-monitoring-7ng6b resourceVersion: "8328" uid: 7989e267-2e22-473b-94b9-ca6accfa1dbe spec: extra: authentication.kubernetes.io/credential-id: - JTI=63f7fea3-a5a9-41a6-966b-53a13db98bcb authentication.kubernetes.io/node-name: - ip-10-0-130-232.ec2.internal authentication.kubernetes.io/node-uid: - e59495db-7837-40fa-aac5-39e677c61644 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-b4g8j authentication.kubernetes.io/pod-uid: - 2411d030-4554-4454-916e-8349f9e831e2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 7fd8e5eb-88c7-43e2-a6a5-16dcb8a2c65b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T22:21:12Z" lastUpdateTime: "2026-06-12T22:21:12Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7ng6b" reason: AutoApproved status: "True" type: Approved