---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T16:42:54Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-17T16:42:54Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-17T16:42:54Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T16:42:59Z"
  name: system:openshift:openshift-monitoring-hnx59
  resourceVersion: "7973"
  uid: 91400c16-c4f2-4dc7-b4a9-ba395030b6cb
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=44ac7b74-cf87-44d6-9b2e-b03444bda1cc
    authentication.kubernetes.io/node-name:
    - ip-10-0-138-117.ec2.internal
    authentication.kubernetes.io/node-uid:
    - d1aaef36-776f-4bcc-86b9-28c715faf215
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-847b8bd8d7-tf2zk
    authentication.kubernetes.io/pod-uid:
    - 198281a5-7fbd-43dd-97ca-43a43f06082c
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 5e5ef302-df5d-49b2-b734-6f7b7bf4f5df
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUk0b2tPbzNLODNuN0FLOFkzc2hpdjB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTNNVFl6TnpVNVdoY05Namd3T1RFMk1UWXpOelU1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUmxCQWFEQ2M2VXcyN3FkOHloT0ZFeApoREZxRDNtWENia0dUTG9Cd0xUS2xGc1lwSG1EK0RRWjV2Z1dlOW9UTUxxbktrYUl1YlhzZnBid1IzVmdURTNJCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFMSldJa00xRmhEbEFBcW9SSWpmdnJObmJueWQ3em92SW85cQpWaWNHU1JtaWVlQ01POXpzZldLYWhSMVZjRnphajUwNlhGU3hTTTRVU0V5NzhmYXRXL013RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFBZldXb0xvRWxBaWlZRjg1bGh1V25xdmlzRTZ3eDNjMzBNK3pmVTZiMXZjeHNJUlNWWXIKU1lEVEQzdEhrbjFMUm9FRDZvWXdOdTZvVU8rMTA3T3BkdkwrKzFGWjFrY0FHT2pDb0FGVUNyOGtuck9QT1E1cQorVjJYSlFJZDFCTWIraVNqaVJaQ21SaFhYUjAxd1NsM2NWeFNzYXFtUDVCVGVod2ptYktPaWtwTGwxT3FWeVVSCmxmUkFRd25BRkxBbTlpWmFwZGtsMnhzbWt4bjNKVnd5bnRMVmU4dm5XTkgyK2R2eHRjcm5vbkd1N055ckVyRXkKdGhQL2x3dnFtd2lqWUh1SkQzUU1MOEhmakdwQ09aYnUzc1dUZVI4aFhWN2VvdTR5VmJRV0N2YlZrV2t4N2VjVQpIYWNORHVyTXhHK3RaRStwcWQxQ28yYzhzVmhrUUgzWG1rbz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-09-17T16:42:54Z"
    lastUpdateTime: "2026-09-17T16:42:54Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-hnx59"
    reason: AutoApproved
    status: "True"
    type: Approved