--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:47:43Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-29T15:47:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:47:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-29T15:47:43Z" name: system:openshift:openshift-monitoring-k4x9n resourceVersion: "8289" uid: 4550c7e8-9e8b-4bac-bef9-d9a1458bf8f1 spec: extra: authentication.kubernetes.io/credential-id: - JTI=a794727e-ff61-48fc-933e-8da3740307b1 authentication.kubernetes.io/node-name: - ip-10-0-140-163.ec2.internal authentication.kubernetes.io/node-uid: - 637f1b66-0b7d-43f0-a3e3-9b6542d56cb3 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-b74zp authentication.kubernetes.io/pod-uid: - 2dfbf7d0-c804-4516-b8e7-926c7e521e6c groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: e4fa55ea-8fd0-4cfd-9a6a-7a7346eddffc usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T15:47:43Z" lastUpdateTime: "2026-07-29T15:47:43Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-k4x9n" reason: AutoApproved status: "True" type: Approved