--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T20:04:50Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-02T20:04:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T20:04:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-02T20:04:50Z" name: system:openshift:openshift-monitoring-vzw55 resourceVersion: "8430" uid: 39fc8a46-a970-4e16-995a-3761ab519c94 spec: extra: authentication.kubernetes.io/credential-id: - JTI=5a864155-5a1e-4e42-a683-d92737c5f463 authentication.kubernetes.io/node-name: - ip-10-0-137-123.ec2.internal authentication.kubernetes.io/node-uid: - 2353f986-ada3-43c7-a9ee-7518e23a8fe0 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-mbfqd authentication.kubernetes.io/pod-uid: - ec0ebcd4-9a62-4f3c-904d-e8127b8bb97b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3e3ad2f3-1f9a-4682-9cc9-57c083dd2517 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRUEJ6UVRhZDBCQmdlNmNQVXZzaElDekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1ESXhPVFU1TlRCYUZ3MHlPREEyTURFeE9UVTVOVEJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJJK2lTZG00Z0s0N0V2eEJVMElMMnVGNAp3TVpZdmFOaTk4Tm80V09zc2U0c0RzcGwxR0xOUTI0WWhCQjgvQ1VoalY3T2RvajdNcndBVElLaFRXRWdSWWVqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQW1QVUwrVlAwSTZ1MUo1YStxUkR2dE5iN2NZSDNKWTZiTjdBbAplUFplRExYN0NZUzN6dFZwM0prbmF4MHZTUWYzNkJ6aHJNb2hLNTFMUFBXeEkxZHdrakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQWF5YndhZGlkdzNpUUFwSE93UkhyaVhLU3FCZ3hYdkNYSUFlb09hSGJUcUlHZGc3TGV4QUUKMjBLb3ZETjQ2U0xaTU4yK2ZBOGJLZFZ6R3dEc09ZWU1lSXNONVRzN3d3bm1Gb2xKMVlic1VuVXJCTjR6dUhCMQpFelU5ZU5tK0tHZ3Jjc1RlMThvN2RjZWFFemtBYUdiS3BMc1VkRWhOdUFGV2dRczJ2cE9uZUJVL2tHUTE0TEZmCkNjODJyNStHWjZrQmdwQVE2aWdscVB0a2JkVDlEQis4bmhvcDhJRXJIaFM3VmNuS0VNNHpCT0U4VG9QVFNNNjkKK2p3L1h6MDNWVjkyMFY4YThxd3p5bnU0aTR0YTdXanpWQWtuSmRnR2U5ZjArSmd1cUdhV0ZRanlIa3Z1N1JRWApub3NzRUpvWVg1VHQ3eS9kSlZYS0pJN1Q4M2V0RWUzbHFBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-02T20:04:50Z" lastUpdateTime: "2026-06-02T20:04:50Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vzw55" reason: AutoApproved status: "True" type: Approved