--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T03:17:35Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-11-04T03:17:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T03:17:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-11-04T03:17:35Z" name: system:openshift:openshift-monitoring-tl9qt resourceVersion: "7180" uid: 9f9d72c6-b80d-4871-8fb0-23b04d9aff9d spec: extra: authentication.kubernetes.io/credential-id: - JTI=143f2ca9-737e-4cb3-8c6d-ef0cf65b8f92 authentication.kubernetes.io/node-name: - ip-10-0-128-50.us-west-2.compute.internal authentication.kubernetes.io/node-uid: - 2f2fc63f-beae-4dca-9cf0-a551102b4f4c authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-gmt9g authentication.kubernetes.io/pod-uid: - e87dded5-1e1b-45cb-ab2e-ae12550dfca7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: dc24f2bd-d18c-41f7-90f9-b6d443e4ddce usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T03:17:35Z" lastUpdateTime: "2026-11-04T03:17:35Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-tl9qt" reason: AutoApproved status: "True" type: Approved