---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-01T19:26:34Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-01T19:26:34Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-01T19:26:34Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-01T19:26:34Z"
  name: system:openshift:openshift-monitoring-f8q7g
  resourceVersion: "9454"
  uid: c3c99d60-4604-4763-841c-2d5cb4a528de
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=555c75e4-b86d-4dd4-ba0d-35124a7fb169
    authentication.kubernetes.io/node-name:
    - ip-10-0-138-218.ec2.internal
    authentication.kubernetes.io/node-uid:
    - ca60dfad-4875-43e1-8219-c48333981be4
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-54cb84584-c4nbt
    authentication.kubernetes.io/pod-uid:
    - e10211ae-3648-4b0b-98ad-70bab9739e9b
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: efd112a9-9649-446b-ba35-5eff80e476f5
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-01T19:26:34Z"
    lastUpdateTime: "2026-07-01T19:26:34Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-f8q7g"
    reason: AutoApproved
    status: "True"
    type: Approved