--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T09:36:29Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-02T09:36:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T09:36:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-02T09:36:29Z" name: system:openshift:openshift-monitoring-678ql resourceVersion: "8347" uid: 94037592-ccfe-4595-bc6d-cd15610fa523 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a841642d-3da4-42f6-82e8-6369c4fe9262 authentication.kubernetes.io/node-name: - ip-10-0-141-231.ec2.internal authentication.kubernetes.io/node-uid: - 425d995f-1524-4b10-b0ba-47e5289a4eab authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-69b6cbdb88-n8cwk authentication.kubernetes.io/pod-uid: - f053f5d7-4fe1-42f6-ac91-0575d753d200 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 53948b34-e23d-4b61-a52d-2d2b1b7be414 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZWczY1VPNXhGdzVlVHBBaXVhN0JEREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1ESXdPVE14TWpsYUZ3MHlPREEyTURFd09UTXhNamxhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQMmxxOUU1MnBUNVhTelk3SVdyc04yagpmaFpCVDV1SS84Q3FRZEJydU53OWs5VVAveUxpU2toM0RMRDRoamtSUGIxeVdIbXd1anFWUWxVS3pkNy90WjZqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTkvV25vanB1ckF3ZzZRdlJpa2F4VEk4R3N2UVozL0NnZlRLRAoxczhOYmw2YW5NajVscmZFeW1YN3hDRzNobGVIV2lpUHRRU21VMW9RZFMwUFhvT3d2ekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUJtNHZpczFNSTM2ZHhCMDUyNlZNbERTTGl0aVlyeXBCU2tEZlV4RWhVdHJCTzRZZHozT3YKaEh3QVlBM1ZVSHo3aFdmSmlPTVYvTTBtekdlTko3dy9FM3R6RGdSdlAxOFJwYzVPRmp3R0RtTUhCb1VzWWMrSgpKeXRCVlI1WWFkQ25ZUmxBdmhXeXB5eUxDYm10K3A1OUZWd1dvRHlnSE9aM0J6Rm8xU3d1VnY2ZUNBUDhzNjh5CncxbVEweUVHeW80ckI4SURRNWJhNTY0NDVEN0ZkYjNNYVBPREROa3drMjdMY2VCTXRCdTFtOFJuR01Ka3l4YXEKR0kwdG92QVV3L0wzTFo1YXIzdUxZZ0RleE45ZXIzaHhFTGZiNW9uSWRUOGhOVVhIeTlKLzlnR0UrMzJPc0U2Zgp6SWJqTFRSaTlrN0I0WHlxdlBUMldyYjVUV3lVbXNPUWVBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-02T09:36:29Z" lastUpdateTime: "2026-06-02T09:36:29Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-678ql" reason: AutoApproved status: "True" type: Approved