--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T19:23:14Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-12T19:23:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T19:23:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-12T19:23:14Z" name: system:openshift:openshift-monitoring-5fppl resourceVersion: "8374" uid: e09a4d52-d552-4d2e-a7d9-9eadb32aaf1d spec: extra: authentication.kubernetes.io/credential-id: - JTI=975d0516-040b-4ffa-918b-d4d45c894b70 authentication.kubernetes.io/node-name: - ip-10-0-141-249.ec2.internal authentication.kubernetes.io/node-uid: - 6d7bde22-2812-4245-b7c2-00985baa1e23 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-85cdb authentication.kubernetes.io/pod-uid: - df8f3888-df8e-480d-ae68-f6b16126ee83 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUTkrdnpmVTc4WllBdERoNWd1Vk5ZUzhtclNzbG9IaWwyTEs3UVg4RXA0dEY5K1M0aFkKNm9sY3ZBVVorVDNvVFlGUXovM2RZSUMxSmxkMVRyaEc3eU5Bb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBS1ppNk81Z2pyYzN0WG4wQVIvaktKUjUxMTMrdWIreEEyek1oWHl0K2wrWkFpRUFxTkxud0J3VmVQUlBMVTQ3CjY5S3YvN3ZQb2pYbk9kZGNSUGZPNVVjWDBhYz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: b7b3a6c6-f4ee-49d6-9901-86ecc8054434 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T19:23:14Z" lastUpdateTime: "2026-07-12T19:23:14Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5fppl" reason: AutoApproved status: "True" type: Approved