--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T22:02:13Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-06-08T22:02:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T22:02:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-06-08T22:02:13Z" name: system:openshift:openshift-monitoring-c5w2z resourceVersion: "9430" uid: 6d7140a1-7bf9-41a9-bf18-08c16c76bf06 spec: extra: authentication.kubernetes.io/credential-id: - JTI=c80d972d-e850-443a-82d7-c9b065783e79 authentication.kubernetes.io/node-name: - ip-10-0-128-26.ec2.internal authentication.kubernetes.io/node-uid: - f9cd23b5-ec47-4acd-a244-1711c6824f90 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-74bbf69bbb-lpn27 authentication.kubernetes.io/pod-uid: - 4e5043ff-ab25-4cd6-8ce3-871e0bc4b053 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: fe5b0498-c128-499e-8907-5ad1abc18a12 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T22:02:13Z" lastUpdateTime: "2026-06-08T22:02:13Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-c5w2z" reason: AutoApproved status: "True" type: Approved