---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-04-17T16:33:56Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-04-17T16:33:56Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-04-17T16:33:56Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-04-17T16:33:56Z"
  name: system:openshift:openshift-monitoring-kg42c
  resourceVersion: "8093"
  uid: ad08ea74-a974-466b-b68b-198713d22195
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=0fd2660e-e2e5-4a00-ada2-47eacc9a39f3
    authentication.kubernetes.io/node-name:
    - ip-10-0-129-144.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 31bd3dfe-5274-464d-a0d9-e3f8cc7d73c1
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-75587bd455-8psjj
    authentication.kubernetes.io/pod-uid:
    - 857db8bf-55a7-4dbe-a3e9-277f452b9fb9
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBU0RIemR4SEdCK1dNWm9ZdnRZdzlON0JsdzFiU2xKWEFGempkTFk4dDFLdHkyZXN3SngKSklyNDl2WnluUHVjczNMN1p4M3NoVVhQQ05LYi9Mdk5hZ1dUb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBUE5OZGp4b2V6TkFDb0Y5Y0FpQng1Ykc5SVUrT0owKy9wMVYxWFJtNlAzTEFpRUF2SnBEcFdLeGJIQXZJelY4CllLNm90ZlVPYVdhTVFYUHF0TzlSWVdnVnFDZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg==
  signerName: kubernetes.io/kube-apiserver-client
  uid: 47edcbb7-70ec-48f6-baea-28d638c7e819
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-04-17T16:33:56Z"
    lastUpdateTime: "2026-04-17T16:33:56Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-kg42c"
    reason: AutoApproved
    status: "True"
    type: Approved