---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-16T17:45:26Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-16T17:45:26Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-16T17:45:26Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-16T17:45:30Z"
  name: system:openshift:openshift-monitoring-skfxk
  resourceVersion: "8139"
  uid: b53e2d72-2dc6-4720-8354-303f59795292
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=ab576cd0-2a1a-44d8-8cee-b6a62270cb06
    authentication.kubernetes.io/node-name:
    - ip-10-0-142-68.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 11a59010-32c3-468e-85cb-a4a3c3afa50a
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cd954b897-mhpph
    authentication.kubernetes.io/pod-uid:
    - f20de196-d565-442d-a658-6eea2b4bf02e
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: c91ccd9e-062b-44d8-86ce-14cec00e3ec9
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRHQwRWxWSmdaZmVtUkFTQUtkNmJrekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UWXhOelF3TXpCYUZ3MHlPREE1TVRVeE56UXdNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJORDlQdVZEWDVFZzhWbWNKV0RwcDl4VAp3MTVqVjJHcHlLUjgzck1EdDErcmxBWmlQS1B1Wk1oYm5UREJvOGtSYTVTSkRLQlFPMm5GRVBnWm9pZTExR2lqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWdhVlFRa1F0eWtGVWNuN1JLdTVZRUZiQm00VVlTdExicjdEUApyNEhxNEgySzRMYXp6a0ltT3h3YUpzeDBhSTVBQ3gzb0lWSlVUV0huaE5PODZRaXZqVEFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVhYVmNpNGF4eGJvSmhHUHppWDR1QzFsK2RRb2NOdDlRdkxabWsrQ2xGNFhmL2tETmh6S2IKSmlHYU9NcmRra3NCYnNRWG1MNnpPR2JMT1JnSnBHL2Q1YzlEVmUrVmxRbDVmOFhHSTB2QnhIc00yYnNRTVFVVApXaFJFNzhWSGFKS2tCb2NuRzFkSjlsRVNuRVErZXoyMU5XLzJNVDN2dnZVODRINndBR0pDTUJEZnZwOCsrTitQCnRVbDZlSXZOWmdjcTRyL3pDSW5lWlQ5ZFBmOGo1SmlhMHFmMHVCMEZMT2xNa1ZUZVZXMHBrazNMS2g4WGJkL2cKL2FhTTQ5Y1BSR3hRRXRFb2pWWjYya0t2b2YyN0RFRTlvSklva2dpYkdPdHNSY3ZoR21TS1Z4aVZnbnpVSlNEOApvNXpPRFJIR2JwcUN1YWZ0ZXBsZVBwZlkyZ0xmR2VMK2NBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-09-16T17:45:26Z"
    lastUpdateTime: "2026-09-16T17:45:26Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-skfxk"
    reason: AutoApproved
    status: "True"
    type: Approved