--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T15:45:58Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-31T15:45:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-31T15:45:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T15:46:02Z" name: system:openshift:openshift-monitoring-7z5tv resourceVersion: "7948" uid: 5081f704-e1db-4b30-b849-b75039b00023 spec: extra: authentication.kubernetes.io/credential-id: - JTI=e45e64c2-396c-4c58-a7dc-2b9993ea2c8e authentication.kubernetes.io/node-name: - ip-10-0-130-163.ec2.internal authentication.kubernetes.io/node-uid: - 1924a6cd-6ed0-4efa-b7ac-0bbb2bec642b authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6f55c4f58d-2szt4 authentication.kubernetes.io/pod-uid: - 374a87cf-01a6-41e3-be18-57a55087ecde groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: b795b134-3203-47e3-87a4-4063695e1fa2 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T15:45:58Z" lastUpdateTime: "2026-07-31T15:45:58Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-7z5tv" reason: AutoApproved status: "True" type: Approved