--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T10:22:59Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-06T10:22:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T10:22:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-06T10:22:59Z" name: system:openshift:openshift-monitoring-fm6qb resourceVersion: "8461" uid: 3e939913-9b31-489d-949d-bd7e7f2fa457 spec: extra: authentication.kubernetes.io/credential-id: - JTI=733f4a13-dd80-49ad-ba98-824e015451fd authentication.kubernetes.io/node-name: - ip-10-0-137-121.ec2.internal authentication.kubernetes.io/node-uid: - 64b29430-a6d8-40b0-b1a0-d30e89745531 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-jpxdn authentication.kubernetes.io/pod-uid: - 5a7404c4-4386-4f2d-aa64-ea0622b6d073 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 2eaa81df-fa1b-47dd-8671-d1875e1f29ab usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-06T10:22:59Z" lastUpdateTime: "2026-09-06T10:22:59Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-fm6qb" reason: AutoApproved status: "True" type: Approved