---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T15:40:50Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-17T15:40:50Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T15:40:50Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-17T15:40:50Z"
  name: system:openshift:openshift-monitoring-r9k7f
  resourceVersion: "8051"
  uid: b156fcff-be65-441a-bf78-c4d9bd4eb0d3
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=8bb4b3fc-8ff1-4702-970d-213c3175587d
    authentication.kubernetes.io/node-name:
    - ip-10-0-129-204.ec2.internal
    authentication.kubernetes.io/node-uid:
    - d94dd3dc-2365-41f2-9279-c20e61639269
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cd954b897-zc9l7
    authentication.kubernetes.io/pod-uid:
    - 66da8ed8-5b7b-4a0a-8aea-89ccb6795e63
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 4f93e664-b820-43c3-b721-f74230bb8977
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-17T15:40:50Z"
    lastUpdateTime: "2026-09-17T15:40:50Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-r9k7f"
    reason: AutoApproved
    status: "True"
    type: Approved