--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T09:29:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-02T09:29:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T09:29:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-02T09:29:15Z" name: system:openshift:openshift-monitoring-6w6dh resourceVersion: "8331" uid: e0ce7ea5-b4ab-4730-ac55-1eb346666063 spec: extra: authentication.kubernetes.io/credential-id: - JTI=104399c9-f9f1-4a3b-82dd-f8c5263d1b88 authentication.kubernetes.io/node-name: - ip-10-0-130-147.ec2.internal authentication.kubernetes.io/node-uid: - 71e2b039-8f3e-459a-9b65-886e8bca93be authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-92st8 authentication.kubernetes.io/pod-uid: - 0a7c0936-331c-49cc-82f8-fb6215cf1d02 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b71e91f7-093f-4af3-b1b4-a815a40b635f usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T09:29:15Z" lastUpdateTime: "2026-06-02T09:29:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-6w6dh" reason: AutoApproved status: "True" type: Approved