--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T07:34:25Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-08-05T07:34:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T07:34:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-08-05T07:34:25Z" name: system:openshift:openshift-monitoring-9cxsq resourceVersion: "8002" uid: ba5e5613-0309-4f59-80e3-4cb53aa6f625 spec: extra: authentication.kubernetes.io/credential-id: - JTI=46854509-f0bb-4695-80a2-dfdec2f21e48 authentication.kubernetes.io/node-name: - ip-10-0-130-107.ec2.internal authentication.kubernetes.io/node-uid: - 80fa3871-ecd8-4b98-baeb-2249b2ad3ccf authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-44zwz authentication.kubernetes.io/pod-uid: - 4368ccfc-5e81-4a6a-8aca-7ca280a1fd87 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUnJVZ0lPeE5KRmQ0STV1YXFHeFdSUWN2T2l1cjhNT3MxNFpVVzJPcG0yd3lXRmJRWXAKTW5aZHlwOEhIQmVRUVpUY2hQbXRmOGdORlRCbHgyK0dNMUM5b0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTC90UU9ET0FITUhyMVZDUHJVaHgrbG1tTkJhdkNaeXhoTU9xRTdXYXV0ZUFpRUFvRndYUVB1K01EOHo1WlNICmhGeW5OdE9zRkNoVUtOTlFQbEpPdGs1ZUd1QT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: ad3b4792-9d0c-44e2-9dd8-44131a33d142 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T07:34:25Z" lastUpdateTime: "2026-08-05T07:34:25Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-9cxsq" reason: AutoApproved status: "True" type: Approved