--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T20:18:40Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-27T20:18:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T20:18:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-27T20:18:40Z" name: system:openshift:openshift-monitoring-x4l2h resourceVersion: "8299" uid: 75096fae-aac4-4c57-bf26-1725f902f6ac spec: extra: authentication.kubernetes.io/credential-id: - JTI=d08b5777-f85d-428e-b60f-13f78648db29 authentication.kubernetes.io/node-name: - ip-10-0-139-20.ec2.internal authentication.kubernetes.io/node-uid: - 4d294c61-e68e-420a-a9e5-7490f1747357 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-t44h7 authentication.kubernetes.io/pod-uid: - c5b42704-6ac3-4fe3-a7d9-6e327f59bccd groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: bf496727-7299-4727-8904-b0a8a0861f90 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T20:18:40Z" lastUpdateTime: "2026-07-27T20:18:40Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-x4l2h" reason: AutoApproved status: "True" type: Approved