--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T13:51:36Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-10T13:51:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-10T13:51:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T13:51:38Z" name: system:openshift:openshift-monitoring-zvxd4 resourceVersion: "7989" uid: ba41254c-5a2f-4a5c-a03c-c65bd96a5eaf spec: extra: authentication.kubernetes.io/credential-id: - JTI=e1e77c93-4ab0-4254-b604-f848e2715a2d authentication.kubernetes.io/node-name: - ip-10-0-143-25.ec2.internal authentication.kubernetes.io/node-uid: - 73ef564e-bb1a-4eae-a124-6325b7884695 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-5f7f494dd4-65k6j authentication.kubernetes.io/pod-uid: - 6b79eb5f-3947-4b51-b06b-f96ba7ed8e07 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 6dcfa1a6-8ba6-4036-8e82-0e1f3240f57a usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T13:51:36Z" lastUpdateTime: "2026-07-10T13:51:36Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-zvxd4" reason: AutoApproved status: "True" type: Approved