--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:18:43Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T16:18:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T16:18:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:18:49Z" name: system:openshift:openshift-monitoring-fzzq6 resourceVersion: "9016" uid: adbe167b-03a6-47f3-8189-ef84ba9e5a50 spec: extra: authentication.kubernetes.io/credential-id: - JTI=6e3ee431-56e0-4f28-a173-7ec14fffec30 authentication.kubernetes.io/node-name: - ip-10-0-135-70.ec2.internal authentication.kubernetes.io/node-uid: - 1193fc1a-c585-488c-a05a-b3b18e948f09 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-4skw2 authentication.kubernetes.io/pod-uid: - 2528af38-f6e1-4c69-859a-6d00a5301ce4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 80e9cc51-38d6-4e92-98e1-fe9a8fcf26ad usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T16:18:43Z" lastUpdateTime: "2026-07-27T16:18:43Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fzzq6" reason: AutoApproved status: "True" type: Approved