---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-10-30T16:23:09Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-10-30T16:23:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-10-30T16:23:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-10-30T16:23:09Z"
  name: system:openshift:openshift-monitoring-d5n2k
  resourceVersion: "6955"
  uid: 73818c83-f2c2-448b-9f0a-5a43e68a6c48
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=218b312a-ee85-4193-b96c-d5c6c97c6010
    authentication.kubernetes.io/node-name:
    - ip-10-0-131-179.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 158ae4f1-d796-4fb5-bca7-fb1542b24d74
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-884576c57-gn2hp
    authentication.kubernetes.io/pod-uid:
    - 93b8a9b8-43df-4dc0-97da-4bfd11f373cd
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 1831fe26-d880-4672-bdce-32b67ca3f120
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-10-30T16:23:09Z"
    lastUpdateTime: "2026-10-30T16:23:09Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-d5n2k"
    reason: AutoApproved
    status: "True"
    type: Approved