--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T01:41:41Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T01:41:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T01:41:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T01:41:41Z" name: system:openshift:openshift-monitoring-xxv5w resourceVersion: "9429" uid: 668df091-469d-4dfe-b540-724bb233788f spec: extra: authentication.kubernetes.io/credential-id: - JTI=6cd16eb1-3184-4cad-8ff8-8015af602b25 authentication.kubernetes.io/node-name: - ip-10-0-140-87.ec2.internal authentication.kubernetes.io/node-uid: - 0ce57b47-9bc1-4872-8390-1d2b98280270 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-dhxff authentication.kubernetes.io/pod-uid: - e9029b9d-9235-4a98-8cce-4a2cca4a320a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJGalE0Y1VsR25iS0Y1cTJIMjRnL0tXYWMxY2RSS0RpaEdkNEl5ZGpXdjlFcHQyRkxzTVQKT1VXODd1Zk5CQ2J6OVRsWEpZSnZSTkVTTS9pbGVMQm5FMm1nQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBZApNV2xYbElYbW1PZDdJVlUrVndreEpwSWtNZW51em9oaHA5eDR2L1M0R1FJZ2ZSZjl0WmpTdzZ6YmJ2YWNuNHBZCmJrQ241OVZxZzhBaHVVVHhSU2NuRHZJPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client uid: 0d94752e-4e7c-4555-a51b-e0c160693568 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T01:41:41Z" lastUpdateTime: "2026-07-31T01:41:41Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xxv5w" reason: AutoApproved status: "True" type: Approved