--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T21:11:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T21:11:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T21:11:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T21:11:58Z" name: system:openshift:openshift-monitoring-664hs resourceVersion: "8175" uid: af6a154b-80b7-4226-99ae-e7b1f1f4e47d spec: extra: authentication.kubernetes.io/credential-id: - JTI=d6a10681-1fac-49bc-9008-0fc2edbbeb05 authentication.kubernetes.io/node-name: - ip-10-0-135-74.ec2.internal authentication.kubernetes.io/node-uid: - db71f2d3-cfe4-4293-a28c-fc20f4c4b86a authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-4nfrp authentication.kubernetes.io/pod-uid: - ce51c5d4-3d30-415d-8b3c-e009a99848ec groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 8f98ad39-b4b9-42d5-b221-161170cbd5e6 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T21:11:58Z" lastUpdateTime: "2026-09-10T21:11:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-664hs" reason: AutoApproved status: "True" type: Approved