---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-08T19:02:19Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-08T19:02:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-08T19:02:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-08T19:02:19Z"
  name: system:openshift:openshift-monitoring-rf4r9
  resourceVersion: "8262"
  uid: 7ae1372a-adad-43fb-9826-8418a4a561a9
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=d341de76-3ecb-4c48-8e8e-86a3d12695e8
    authentication.kubernetes.io/node-name:
    - ip-10-0-130-102.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 4b987eb5-3e03-4610-99bc-4deba2e75b79
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-64786d9cbb-qg8sq
    authentication.kubernetes.io/pod-uid:
    - 83d705a3-ab7b-4a88-8b16-ed9ab5c2cadb
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: c8c9d682-5265-40a3-9c12-d63a49f3388d
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQVByVXczcnJxbXNGYnp6bmNPVk1VT3N3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTRNVGcxTnpFNVdoY05Namd3TnpBM01UZzFOekU1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUUt5cXhFbmszN1A0VmZxandGZXJaegpxZVlwQVhHeCtLSm9NcUljT0hnRnpzOVRpRjJFZkRkUDE2dFd4NitWT25PNkV6UkFuZjVKT0gvcWJBYTVEQ1d2Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFCOTgrSjJSVHRtcFZjbmdEYW9EL1JKVUlENVIzaUpzUkFEVgo4amFQRExDK2E3dEJUNnY4RTNsb0FiQXhGaldLdTlaZXE3dm1BZWk2aVZuYktxeG0ySFl3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFGT0VQWDlyU2p6L1Bkd3lvbkpUOHFXYnJaY2x6ODdWNlNwZWxXL2dCMmxOWlNHaU9VdVoKbWVoWm1ld0owVTdLUFI4R1I1VGpRekI1M2J0c3JjUEpXdmFFVGdCQ2QvdUREOW9hZGtpVWV6b3lqK2JiOEYxLwpHaFpaSU5LY3hpbHBzRG5mOUt3Y1VsWUdmN0sxQndKaitYd3JLR3MydUt0NThlUnlncmpGdlFGWWxCa0RjRjVtCnQzc2ZXc1FJK3BaU3NJSlVrdEVyOEl1UFFoMmZnNGZwR1MraUpFai9OcUZrQWc3UmhCb3N1bTdUNjVpTkFJSkEKQXdiWHhyUlJXcWpsYkxiRGNJZnpvQXB1NFVaSkpIWXFMQXpmL1ZWRGJEYi8wZHVLc09BbDExKzRtLzBneHkySAoyNGZ5SWQyK2NJZG5wNmRkeUpvVnNOWW1RWkdDZ1liQ0F4dz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-07-08T19:02:19Z"
    lastUpdateTime: "2026-07-08T19:02:19Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-rf4r9"
    reason: AutoApproved
    status: "True"
    type: Approved