--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-03T23:34:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-08-03T23:34:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-08-03T23:34:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-03T23:34:35Z" name: system:openshift:openshift-monitoring-df5kg resourceVersion: "9217" uid: a9cb9dde-b2d6-444d-8b5c-a4dc6b476ac5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=93da56ce-37cd-407b-b88c-2594f718b679 authentication.kubernetes.io/node-name: - ip-10-0-143-183.ec2.internal authentication.kubernetes.io/node-uid: - e029ca87-c791-42f7-9a15-688ee6a06321 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-csljn authentication.kubernetes.io/pod-uid: - a01ef950-7a61-40ba-a9c0-1d95c8b7b573 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 9ecbf601-469e-4212-bd38-3082b56ec525 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRTGMzc0VJcDl6MFp6QktRMmwyMWF1ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNE1ETXlNekk1TXpWYUZ3MHlPREE0TURJeU16STVNelZhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJCZ0pQTm1pQnFFV1hqVlQxeHJNbVRSZApvdzNJMk83VzJKS2pZQS9ROHc1OUVwai8yc2VQYzhCd2ZwM0pKTjR2bExQMWlPcFdVV3NSaDdsSlpEMnphUGFqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXlCcEVwYXoraGJ1VGhEQjE5dnM2eGRtN0ZoZWxJQ0p5azdqbQpiakgwYUNsZFJaTkZLTkZXemZnREduNEJIaWdTdHpqUGw1YWtIQkhwTXd6LzZwajZXakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUx6WVRQVlNlajQ4VGx2cVExNitUMWhXRVRUbmg0bzZ0TkRmeUtrdGVoeElzYjJ4WEYzREgKQUI0aGFFZ3NnUlpCVVdmOFZRL0FPQmdjbjZBUjJ2S2hKZkZ1T2lqR3k3V1FXc1RYYWppOXpYVnN6ZjU0a1ZUcApqRmtEQU9GMlZpVWwwT050YmUzUnN6dWVnT2QxYlVuWUZiWGpzMmdvRk5OeHBsbDJUendROWNQOGJhZ2lFN2RDCjJ5VXc2Nm9jZS9iS1RvU25zRW0vNFJtK29xTjRGQXpYMEpUNWRzaHBhbmdubGhob0hvOHJnRnpjZVFUWko1OFoKQjRLV2p6eFJmWGZPaUZYMExXaXdYN1A4dGFWbFBLakFPNVF5SXh2anZkV24rRVpqRU45NlZSbk5DUEpKSWVuTwo3QTdqZ1o5cTZFeHgxdmlCT2JWKy9yTWJsLzZET0dPd2F3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-08-03T23:34:24Z" lastUpdateTime: "2026-08-03T23:34:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-df5kg" reason: AutoApproved status: "True" type: Approved