--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T17:02:51Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-02T17:02:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T17:02:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-02T17:02:51Z" name: system:openshift:openshift-monitoring-p5xrg resourceVersion: "8560" uid: c4e2033d-e57e-442a-b9c8-d9f7b2ef8886 spec: extra: authentication.kubernetes.io/credential-id: - JTI=568be868-6a9a-4c24-b7d3-ee70a06f2a67 authentication.kubernetes.io/node-name: - ip-10-0-135-235.ec2.internal authentication.kubernetes.io/node-uid: - 49123464-ff4b-42b2-aec3-bd2e2f70cf3b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-xtkxb authentication.kubernetes.io/pod-uid: - c381b658-7134-418e-8336-7bdaa85d1c6b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 3bac581d-dfcc-4509-a0ac-fbc7cd6ceb0e usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T17:02:51Z" lastUpdateTime: "2026-06-02T17:02:51Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-p5xrg" reason: AutoApproved status: "True" type: Approved