---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-21T15:01:51Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-21T15:01:51Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-21T15:01:51Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-21T15:02:01Z"
  name: system:openshift:openshift-monitoring-jbs5d
  resourceVersion: "8001"
  uid: c8f9e34e-416d-4157-be66-931bcd59b28b
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=a9dbf933-b752-4d61-bd8a-313285233405
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-244.ec2.internal
    authentication.kubernetes.io/node-uid:
    - ace800ae-8dd9-4239-9dde-30da409662cb
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-76cf8966f8-htn7r
    authentication.kubernetes.io/pod-uid:
    - bae090d7-7387-4e79-bd16-b249c31fe457
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmxjblpsY2pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJQYlNIZ3hTUXkvVytmNnhnUC9NWFpNMFovdk00eXlaSSt1Mk9LVjhHWm1tbzhpcm9Wc3IKMUNsUFZ5OHNad2ZBMHpOTHhjTWRLUHVxSXZFK0pndWVtU0NnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlBWApzdkRYc1FvRUtrNU9lYjhlT2JqdTFtQlFGMDBucFUyN3V5MmEra2pLeGdJZ2ZiS2R5Y0RWa0ljQUJUeUtvZXBNCjU1Wkc2cWgvdk9BbXo4WnR6M2k2WFpvPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K
  signerName: kubernetes.io/kube-apiserver-client
  uid: 4fe0df38-6cfb-4c02-ac6a-e104c216e181
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-21T15:01:51Z"
    lastUpdateTime: "2026-07-21T15:01:51Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-jbs5d"
    reason: AutoApproved
    status: "True"
    type: Approved