---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T19:07:30Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-17T19:07:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-17T19:07:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T19:07:33Z"
  name: system:openshift:openshift-monitoring-b6t9n
  resourceVersion: "8022"
  uid: 78878d5a-4d37-4fec-ba47-75c146be2b77
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=1dfce269-7840-4b0f-8649-c9f8fbbfdc78
    authentication.kubernetes.io/node-name:
    - ip-10-0-140-225.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 4721065e-3db2-43ab-ac87-ea33e5e63b07
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-847b8bd8d7-97zqg
    authentication.kubernetes.io/pod-uid:
    - c653f4cb-bc89-4470-9d85-f6550ff7f325
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 1a22592e-378d-44bf-9b43-66ae6c4decea
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-17T19:07:30Z"
    lastUpdateTime: "2026-09-17T19:07:30Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-b6t9n"
    reason: AutoApproved
    status: "True"
    type: Approved