--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T08:17:01Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-04-23T08:17:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-04-23T08:17:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T08:17:05Z" name: system:openshift:openshift-monitoring-2b542 resourceVersion: "8189" uid: 98fe71dd-a468-4eb9-ab82-dc0006130c4b spec: extra: authentication.kubernetes.io/credential-id: - JTI=17e7292b-c0d2-4f99-8faf-d2832f9bb1d1 authentication.kubernetes.io/node-name: - ip-10-0-134-8.ec2.internal authentication.kubernetes.io/node-uid: - 4c68f437-68cb-401a-a97a-1761deb7a960 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-75587bd455-cbh4v authentication.kubernetes.io/pod-uid: - 2c1dd227-3279-4f30-b918-473a6a080619 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 73625817-6c3e-4995-96a4-acc07c6d2da7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T08:17:01Z" lastUpdateTime: "2026-04-23T08:17:01Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-2b542" reason: AutoApproved status: "True" type: Approved