---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-04-17T17:27:35Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-04-17T17:27:35Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-04-17T17:27:35Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-04-17T17:27:36Z"
  name: system:openshift:openshift-monitoring-nx29l
  resourceVersion: "8067"
  uid: 02117c72-5464-47c9-b263-d9ca6acb3e2f
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=a8cbd111-c959-475d-acb1-72ed7338ab33
    authentication.kubernetes.io/node-name:
    - ip-10-0-137-46.ec2.internal
    authentication.kubernetes.io/node-uid:
    - a68dd640-367a-485d-a48a-ef1a3ffa23d0
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-75587bd455-8kt47
    authentication.kubernetes.io/pod-uid:
    - 61d0dab8-9f71-4bee-b48b-178b647667dd
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIL01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJJKzVrejRMN2gyTDdiRUVmeSt5Z1RxMnBOa0lZT3c3WVVsZkx6aGc1d3YxeHh3Uzk0OFoKQSttQmNETnFwR3dYc0tSQU1taytNanI1WWljM2ZkT015V1dnQURBS0JnZ3Foa2pPUFFRREFnTklBREJGQWlCMQp3SEZxVXRnZzR0SmoyWVdHdzYvdXRDRy8yVGhPd0JkWHI4b21lNmltRlFJaEFKcFdFSTRGNmYyZmRya1hmOW5jCjRFVzFuRDJpSFZXd0hEelIvZEpOdlJ1egotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K
  signerName: kubernetes.io/kube-apiserver-client
  uid: f4772058-4756-41bd-ad0c-ac0e4fb4e934
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-04-17T17:27:35Z"
    lastUpdateTime: "2026-04-17T17:27:35Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-nx29l"
    reason: AutoApproved
    status: "True"
    type: Approved