---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-06T20:37:49Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-06T20:37:49Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-06T20:37:49Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-06T20:37:49Z"
  name: system:openshift:openshift-monitoring-b5cql
  resourceVersion: "8180"
  uid: 00e56219-4a13-4b03-a0ac-4019f3708c5a
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=16e63cdf-26c3-4fe4-a413-05dbca92f9f2
    authentication.kubernetes.io/node-name:
    - ip-10-0-134-39.ec2.internal
    authentication.kubernetes.io/node-uid:
    - fa663ae1-7b42-4760-bd59-b66f641491f1
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-64786d9cbb-qtl8n
    authentication.kubernetes.io/pod-uid:
    - 71beb5de-c8d6-4dec-b5ac-8fc153f78270
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 2c26c4f5-6c1b-4db9-96c2-c3d0be2ed8b2
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRzZjZVE2ZGNZbmZHS09EUzFuNWRFREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EWXlNRE15TkRsYUZ3MHlPREEzTURVeU1ETXlORGxhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQQUhGQng5V1FBTTNOazVHdTYyZ1lIcgpoSXpaZkdHRUlua0pCNWUwNUhKeGpKNXoyNkNuSFpMaFhWOC8yRzNETkVHZ08vL2hVdzNGU0FQT2NqT1RMSldqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTlubnZKYkhnY1ZYTXg5cmJOem83VGd5Rk9pRTlHeENOWldlTApwWmsvTGE5S2JjYmtkWDM3R211ZWFIajRHdDVNcUNwSWpheVlLYWVSb0dNMG5KMkxiakFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW5Jek8zZGovYkRnK0M2UWJzV2VIQWJJaHByVm5oMGRhM2ZsL1dJaDNkeTd0VmRIRC81T2oKVmlFb3hYaEVEWVZJaVY2QXBRZXdoNHVvc1VxS2UwM1ZhdTV5VDZ0VFpmUjYwNmdOSVpLclpJaUlpeDRBazZ4aApzc1ZSUzFXY01JV0hzVlpsNnZGS1JSMDFMV1B6SklhbThkcTZYbHpyZEc1L2RpdVBoRFNnazJLaXVwOGlJcjcxCkF3TTdhdkd6SnBBNUttRk9NZVNpOWhPNE5LR2VxMzY3Y2pxNUNzYU4wM0JPTWlpZVZ3c21mRUtIVDRzYjhQUWYKS3pUcjBKVmRCN21UbDN3WEFFSWdGaDgrK0FBa05jMnVPTkx1MVpiRUE5d043ZFpZcHpYTFU1MmxoU3RtRUxoVgplZngzY0dibWEzUE5WRWtnOWRGMUQ3YW9lY2plSlcvZElnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-07-06T20:37:49Z"
    lastUpdateTime: "2026-07-06T20:37:49Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-b5cql"
    reason: AutoApproved
    status: "True"
    type: Approved