---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-27T21:26:24Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-27T21:26:24Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-27T21:26:25Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-27T21:26:32Z"
  name: system:openshift:openshift-monitoring-xg9j6
  resourceVersion: "7981"
  uid: 6b4c0f50-5b3a-4333-8a6d-543a82f9529b
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=e1d8b44a-4313-4133-8e75-32b608077e00
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-132.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 49794a86-8e31-4cde-bd7b-3b285ef461dc
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-548b489cb8-qbmr9
    authentication.kubernetes.io/pod-uid:
    - 05bffb69-29ef-478f-9f21-3de2e2a66b9b
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 57705297-84b6-4ad5-bdfd-65dee213b7ce
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-27T21:26:25Z"
    lastUpdateTime: "2026-07-27T21:26:25Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-xg9j6"
    reason: AutoApproved
    status: "True"
    type: Approved