--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T18:12:24Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T18:12:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T18:12:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T18:12:24Z" name: system:openshift:openshift-monitoring-qgq8c resourceVersion: "9335" uid: c5edb8b7-c4ec-4f09-845f-59d5cc7438c5 spec: extra: authentication.kubernetes.io/credential-id: - JTI=45bc24cc-7d3c-4672-af45-46fcc99ae21e authentication.kubernetes.io/node-name: - ip-10-0-140-216.ec2.internal authentication.kubernetes.io/node-uid: - cba633db-0351-46df-aef9-4bddda2cce33 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-7qckw authentication.kubernetes.io/pod-uid: - 76e1a31b-3e39-472f-a4ef-9d53ebc7a59a groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ed5e35d7-a0ab-42e4-9ad7-14c40fdec381 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T18:12:24Z" lastUpdateTime: "2026-06-08T18:12:24Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qgq8c" reason: AutoApproved status: "True" type: Approved