--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:24:53Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-07T16:24:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:24:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-07T16:24:53Z" name: system:openshift:openshift-monitoring-5tc5z resourceVersion: "9303" uid: 053b6207-79f2-41ad-a807-2b2a3f836a23 spec: extra: authentication.kubernetes.io/credential-id: - JTI=f939a52f-36ab-4a22-8796-8dc74d237a38 authentication.kubernetes.io/node-name: - ip-10-0-130-212.ec2.internal authentication.kubernetes.io/node-uid: - 9a0edbe2-a068-4561-84a3-2f76374e8811 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cdcc96965-lqhqh authentication.kubernetes.io/pod-uid: - 53d87652-ec15-437a-a85a-26343327106c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 8c3f298a-42aa-407f-8308-83cdf8185c27 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRZDBWNHdEUmdaaUFKb0lLTWl1NXN5VEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EY3hOakU1TlROYUZ3MHlPREE1TURZeE5qRTVOVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJLMWxSeEtnVjV6TXU2VjU5WnBZVzgzYgphWDZIUklGQzFHNm5zVk1RVGNTVXRocXVQcVlhRTdEUUQydlJjWko0bXNQaDBnWE11NWU5dTk1ZEVTdzdLL21qCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQVRGdjB5RlVPblNUM2FFRGNydkFLa3FlUkd6TnNmWEdtUUlKSQp4eEdQYWdyTTU0b2ZlQ0FrL1FZTUdNTEFtb2dVMzgvcTBwS2I5cHEvMXNtVWlYblhyekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUl2VmlxOGUyTy84TkplUXFxU29JY21NZmExMzBibEZmRHB4d1ZBUi9yTklyc0E5VXY4MXEKNFhUTXBBQkFmQVBtR0ZONDQxa2R6THVPaWtSUVBNM2dJR0dVVVJpcGZiQUJ5dnBTeFVvMExoV0pacmliUUJEbQpId1U2Z1hud2tFRWJ6ZGtwWUllWlZhT0dwYzA4b25NdXNpeEpUcWIwN3N1SnhNZmtVSjduWmpWYUFQMk9ZRy9iCnRWcER4Tml4VDJxYWxMTTJjanE2TE16L3BYWmhhZUF1Q08yNjhEQW5HNWhSVThrU3BQWlUzRlFidzlpM0QzZmsKZnE2WDVTZmFrYWF0T3ZNVE1lT2pHUVFSRFIzQ2hIUzlZVEdQYzMxMUI1eWFJVkFrOHV5bHBkVUpkY3owQWd4Qwp0bTQ3RVRqczcySGhXb1FFTDIycGdmU2xWbVd3Z3dkK1lBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-07T16:24:53Z" lastUpdateTime: "2026-09-07T16:24:53Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-5tc5z" reason: AutoApproved status: "True" type: Approved