--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T14:20:48Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T14:20:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T14:20:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T14:20:48Z" name: system:openshift:openshift-monitoring-6wql4 resourceVersion: "8236" uid: 1021a3a2-dce9-4d8c-b96e-423c0512e49c spec: extra: authentication.kubernetes.io/credential-id: - JTI=56720a3a-6132-49e4-a1e7-4bf464cbe773 authentication.kubernetes.io/node-name: - ip-10-0-128-234.ec2.internal authentication.kubernetes.io/node-uid: - cc05f003-2072-4a35-a90f-305c6b6ad9e4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-jhpqg authentication.kubernetes.io/pod-uid: - 6d08be70-1756-4f7d-9f95-d387672ceea0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUThhVnVNVE9IR0NzRCtOT2t6WWp3cnZUYW1nR2pYRzRqUEVkZ0ZsRVdLWVVGck5pTWYKaDEzQktiQldKcXR6UVZ5c0orSFJDQ1NXQ0MvcEo5MkhyT05Eb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBSXdna1d2N0tEdDh1Q09KODVQdjBPZjBvZ3Z6Qm5DcHhzNE1uOGRueUFGa0FpRUE1bk5QZzhYTzZYSXJua2g0CkF1c1VmZytsYkpIRnhMZDZBQ2orS2ptVmpzcz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: 13530132-7d17-4380-99a4-ce6726a7957c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T14:20:48Z" lastUpdateTime: "2026-09-10T14:20:48Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6wql4" reason: AutoApproved status: "True" type: Approved