--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T15:05:44Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-22T15:05:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T15:05:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-22T15:05:44Z" name: system:openshift:openshift-monitoring-qqsxb resourceVersion: "8525" uid: 60fa8c36-ca8e-4a67-99ce-0fac8f38ec51 spec: extra: authentication.kubernetes.io/credential-id: - JTI=d2be393e-08ef-4ecc-bb7c-774c13f9046b authentication.kubernetes.io/node-name: - ip-10-0-132-228.ec2.internal authentication.kubernetes.io/node-uid: - 041b890f-a004-4e98-8d72-66a8c17ebaba authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-76cf8966f8-s5jg5 authentication.kubernetes.io/pod-uid: - 1140a2c3-499a-4208-8026-6e804edbbb07 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 00ab3a68-b8ab-4dff-bbe0-0387dd7b9314 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T15:05:44Z" lastUpdateTime: "2026-07-22T15:05:44Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-qqsxb" reason: AutoApproved status: "True" type: Approved