--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T23:08:17Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-09T23:08:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T23:08:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-09T23:08:17Z" name: system:openshift:openshift-monitoring-67tct resourceVersion: "9364" uid: 79121293-3738-4e5b-827a-fd769436d6b6 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a469e5d8-f526-4218-8407-177c0a4447f7 authentication.kubernetes.io/node-name: - ip-10-0-142-217.ec2.internal authentication.kubernetes.io/node-uid: - 2af1db01-fabb-4f1c-b5dd-84159eb461a5 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-j5kg7 authentication.kubernetes.io/pod-uid: - 820c1525-62c1-4181-9a2f-aef3a2157d40 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c3550334-2ee1-4919-955b-8b6a29d9cf38 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T23:08:17Z" lastUpdateTime: "2026-09-09T23:08:17Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-67tct" reason: AutoApproved status: "True" type: Approved