---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-11T19:26:28Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-11T19:26:28Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-11T19:26:28Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-11T19:26:29Z"
  name: system:openshift:openshift-monitoring-l9brn
  resourceVersion: "8543"
  uid: d5a177c0-770d-4438-8434-4082b6937c29
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=a2f87132-9b52-4c20-add6-3b7b1f82f4dc
    authentication.kubernetes.io/node-name:
    - ip-10-0-135-70.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 2585623b-1a10-4e7d-b1cf-174b0481a08a
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-5f7f494dd4-2sw8z
    authentication.kubernetes.io/pod-uid:
    - b2ecd808-f1fa-496b-af51-5c8d8f8527f3
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 5267ec19-6cad-4ac3-b097-da3a44996cbe
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQU9QcEl3NnRVbk4zdzdGK3I1OS9iVkl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXhNVGt5TVRJNVdoY05Namd3TnpFd01Ua3lNVEk1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVFhtKzNaYlNwci9FTEg4enMyY294MwpHLy9QK0o3ZzFESDN0R1BIcTA4REhsUEpOYnBQZEFvRXE0Ym5vNlpJOFMvYTJnK0Y2NW81NUM4YThUU0N4YWRYCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFKUTh3eFRGVnhiclpoZm41Q0VCc3JpYi9KVjRGdkhPdGFMdQpzenc1b2lZM3ZsRWR6SHNjMzRJU3JnYjJLcXdSM2Nab3VaVmxqUHdsK1pzWUE3c2JTOW93RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFGemZZekpmOW9xRTBqcllUblM5Ym5zUGl6a2gyRElPcGdwTTcvOUxjWndkbW55cnp5R0UKVEZPakZyaFdSdHRTek9HYWNjeTd6QlAxcE0yZk1SdW1UeTlyNzhRYkVEUVlhb2VvM1hReXVDRkFCcjNSNDlZSApLQVJtN3EzSnJTSEJxeGdZMDVnaUFXUklaeDIxUUNXRDBiRGhIT1E0cEdUZ0tnbUJVZmRXRWNEVHY2aXNuYjZkCjRxK1BOMGVkZXZaVGRGVWovbjlQUTNFOGFyOEFzMExHSjNwY3ltd0l6c09Va1RCSi81dTJqRy94TEVvYVkxUjMKTHhIbGNpS1hQZDJwQ1NxRHNpY2RZSGZLWFRPcWxDWTdWNlBrUXFrZEFVVk9qZG9BRTh1dTl1U2RGYlU3N0xSNwpNcFZlbWYxY3k2d0dmUHFIY3lpNzc1c0NIWCs4ekdRcklCMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-07-11T19:26:28Z"
    lastUpdateTime: "2026-07-11T19:26:28Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-l9brn"
    reason: AutoApproved
    status: "True"
    type: Approved