--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T04:28:00Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-10T04:28:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T04:28:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-10T04:28:00Z" name: system:openshift:openshift-monitoring-w2zlb resourceVersion: "8778" uid: 1cac52e0-6383-41ae-b350-a41d646adf5d spec: extra: authentication.kubernetes.io/credential-id: - JTI=7b5b3965-d01e-46cf-a90b-53f3f686740e authentication.kubernetes.io/node-name: - ip-10-0-129-39.ec2.internal authentication.kubernetes.io/node-uid: - 7b3358ca-b5ef-4656-9132-a80fc8914eb4 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-98bgq authentication.kubernetes.io/pod-uid: - 39e4e57d-d703-4471-8868-62e7e551ec69 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 090eab8f-78a8-4bbb-8995-1640faf6a5ca usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T04:28:00Z" lastUpdateTime: "2026-09-10T04:28:00Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-w2zlb" reason: AutoApproved status: "True" type: Approved