--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T19:30:56Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T19:30:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T19:30:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T19:30:56Z" name: system:openshift:openshift-monitoring-b56b5 resourceVersion: "8340" uid: 6e8dc5f0-9631-4799-98e1-4c0378404601 spec: extra: authentication.kubernetes.io/credential-id: - JTI=93d74c29-d2fb-4691-899a-83429a895efc authentication.kubernetes.io/node-name: - ip-10-0-140-87.ec2.internal authentication.kubernetes.io/node-uid: - e8a1ba81-2837-4f39-9cf3-68d8bf1ba523 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-rftbz authentication.kubernetes.io/pod-uid: - efb86fd8-4782-4e7d-b732-52987e85c001 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 63a6d48f-1970-45e6-a55f-bae37b585a04 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZkE0VjR0WkFxUVJrb2NBbFExaWhYVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qa3hPVEkxTlRaYUZ3MHlPREEzTWpneE9USTFOVFphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJKclNKS3Q3bjNsU21GdEJsTTF3bHFRSgoweEJKYUZiUzRMUlhrc0VDa2NkMlVtMWNTZGNET3I4RjFpWmQwNGMwSnVUVGhmOExQcmdJK1pnQjZVMTFlMGlqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTQrK2duek05eUJRTlIxYUNVNDl5MStXUXNzSlQ5UkF5dUxMZgpiOCtQdGxucEg4Q1ZSa2NPelB3UG1qTERYRWg0SjhLWVhqaWZDQWxTelZoNHl3bVJKREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVc3bHgwN0Z2Kzh4YnZuRC82RS9aYXVMWDJTa050Y0lsRElhWHlFOU1BbmxrdGJBbHlCYWMKMTRRWUJSUWRPWmpYUk94SVRxSzJ0R3BTNGtsZTR1MGRsdVMvK3RTRk5YMGtBM2htZllIcWVyTUgrem5wdEt1UQpxYnpKN3NMQ1JTR1ZPUmwwOTZheDJKWkkrRmhMeHRzZUY3S01YaDNkSEtFbGc1blRRY1RWUWRYTDY4UFVLZkIvCjdOelVSb05LNTMvUWU5ZHZPa3gyYVlDWDRKK2Y3YTFKazdJWVQ3MzFTd1VPL0MxakZRSHM3UExseGVLRXdiMysKYlJqSlZEWGR4K0dKd3NpY2pvNlJaamtacHV3ZmFnLzhUb1NZVlhwaHM5YlUzdFRSSnhZUHZVam9tZmZJRFJRYgpQY21zY0VMMXVqYnI2Z1N1TlpWNlBjc1J3YVExaHdmN2Z3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-29T19:30:56Z" lastUpdateTime: "2026-07-29T19:30:56Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-b56b5" reason: AutoApproved status: "True" type: Approved