--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T02:43:49Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-08T02:43:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T02:43:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-08T02:43:49Z" name: system:openshift:openshift-monitoring-gxbbz resourceVersion: "8867" uid: 9ab5ed63-2e34-4ce3-b889-7511a7a2b63e spec: extra: authentication.kubernetes.io/credential-id: - JTI=62d9df0a-3f4f-4bd3-8261-a09842ae7456 authentication.kubernetes.io/node-name: - ip-10-0-133-70.ec2.internal authentication.kubernetes.io/node-uid: - 24231e69-2b30-4814-8d15-135de8e70bad authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-gnjbh authentication.kubernetes.io/pod-uid: - e26da177-a042-4512-9336-dca8cf016573 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 21d6f733-9999-4190-a2c0-3d0450bb9153 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T02:43:49Z" lastUpdateTime: "2026-09-08T02:43:49Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-gxbbz" reason: AutoApproved status: "True" type: Approved