--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:02:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-07T14:02:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:02:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-07T14:02:25Z" name: system:openshift:openshift-monitoring-ghhph resourceVersion: "8113" uid: b5ec08bf-f2ba-482b-8a4a-78a854d4bf8a spec: extra: authentication.kubernetes.io/credential-id: - JTI=e48f45b9-879a-4040-9167-70dbe168923b authentication.kubernetes.io/node-name: - ip-10-0-129-77.ec2.internal authentication.kubernetes.io/node-uid: - 698253b7-5b13-4a38-89fd-dc9ec57ab85b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-64786d9cbb-fdrsz authentication.kubernetes.io/pod-uid: - a0495158-00aa-4806-a17f-84c99912adde groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: c60e5ace-f9e5-41e2-b900-d2884fcbda98 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T14:02:25Z" lastUpdateTime: "2026-07-07T14:02:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-ghhph" reason: AutoApproved status: "True" type: Approved