---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-10T00:05:13Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-10T00:05:13Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-10T00:05:13Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-10T00:05:13Z"
  name: system:openshift:openshift-monitoring-zs6vn
  resourceVersion: "9538"
  uid: 8f285004-6af0-4ad9-867f-3fd7d013e936
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=2b19fec0-28e3-4367-a3b8-8a2028ec50c2
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-28.ec2.internal
    authentication.kubernetes.io/node-uid:
    - a6b2ba13-04f4-445e-9e08-3539dffc1dd0
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cdcc96965-xtpll
    authentication.kubernetes.io/pod-uid:
    - 8157b04a-9036-4a96-a570-eb8d0e22dba5
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: ab8e4dfb-0774-4d1b-a1ff-9d245a28ece6
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRYnpjSFQ3VHJkb01IRnMxMlM4aFZ4akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXdNREF3TVROYUZ3MHlPREE1TURrd01EQXdNVE5hTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJDVjBrRWV6NHl0STJUeTY4UlBYdklLRgp5cEthczd2YVdsSmJkb3JvanZLUHVreDZWcU5lRVV5QndVOU8vT3J4bTFxa3JLdldKNHM2SzIxNlZpWHljTlNqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTFyM2FpM2hZbWlXc28zV1ZMbm5UOUs3OXVpdDk1Q0dxUTdXUApqZjJlYlkrVkYvMFdZNjYwU0pDL25WSUUzTUhyallRRWhJc3FlNGZOcXZlVHZRYTAzREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQUt5TTZtKzF4Yit2S1o2Wmk1QTJzaTljSjRzTGNxVzM2Ry9raU8xSGtFYUVmYWcvbTkvWEYKMENWbzVnbVZ2YkdFVG1veDdJc1R0cU5BSlZqK0xya08rU0prRmxreVJrYmNvd3JtaDA0bElSM1c5NGZ2UWdEUgoyY0pKWjh5Q0s3TlhCSHdxVXIyYnR4MlJoTkd3ZnllcW12VEhWK0lxU3lIcDA4K2VmeW5yWFBCRDRNdVpLMDBjCnh5RUJNQ1N5bjBjTFNTSHNRODE0amZJMndxc1NMbG9rcW9aWTlDMzQ3VjdsalJrY01wV1VmUkhzcUcvNnh0dloKbmVkSVpTZmZTY3MvaHNGU3hjK3FGNmVHajg4c1dpMVFaa3RnMEd3dFBsMmRPTmlyWVNBN3dlN3UrbGx6bzUrVgpReDdPcGV3QXloWncxRWQ3aE9iVUpmeWdYOWdtMFU0ZGtBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-09-10T00:05:13Z"
    lastUpdateTime: "2026-09-10T00:05:13Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-zs6vn"
    reason: AutoApproved
    status: "True"
    type: Approved