--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T18:44:45Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-24T18:44:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T18:44:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-24T18:44:45Z" name: system:openshift:openshift-monitoring-pmcwb resourceVersion: "7571" uid: 2c225efc-c5e0-4569-a652-d95a250cea6f spec: extra: authentication.kubernetes.io/credential-id: - JTI=6ce86328-2e42-490e-b358-2cfd1f5cdec4 authentication.kubernetes.io/node-name: - ip-10-0-134-30.ec2.internal authentication.kubernetes.io/node-uid: - d7379d0f-ce73-45d5-9de7-bc9131a51e56 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-qtf2r authentication.kubernetes.io/pod-uid: - 9ca07cf2-39b7-4962-ad44-fb73e63c4005 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e627545b-a27c-4819-b05e-70cb893f993b usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T18:44:45Z" lastUpdateTime: "2026-07-24T18:44:45Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-pmcwb" reason: AutoApproved status: "True" type: Approved