--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T07:49:41Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-15T07:49:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T07:49:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-15T07:49:41Z" name: system:openshift:openshift-monitoring-c4s2g resourceVersion: "8326" uid: 60358348-2360-40ab-ad4f-c80d6a0ae2c5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=be54f633-b3fa-43dd-9831-6299f09d9c06 authentication.kubernetes.io/node-name: - ip-10-0-139-233.ec2.internal authentication.kubernetes.io/node-uid: - 47b50ae8-6587-43a2-b7b2-6bd051b3a2ab authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-f9d7df769-q7f9v authentication.kubernetes.io/pod-uid: - 222cffd0-217a-4793-bde6-8f4820b987d8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 43ad01aa-b9dd-461b-b5ec-1313b9f22045 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T07:49:41Z" lastUpdateTime: "2026-06-15T07:49:41Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-c4s2g" reason: AutoApproved status: "True" type: Approved