---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-13T17:06:17Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-13T17:06:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-13T17:06:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-13T17:06:17Z"
  name: system:openshift:openshift-monitoring-zdbk9
  resourceVersion: "8288"
  uid: eedbfaa6-1b21-46de-b1a0-2713ef3d11b2
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=8b301a8d-562a-46e5-a65a-2b5d838b18e6
    authentication.kubernetes.io/node-name:
    - ip-10-0-136-220.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 306fe638-1ee0-4013-947c-00344f9e91e6
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-5f7f494dd4-ttd4d
    authentication.kubernetes.io/pod-uid:
    - 7549ca91-bd0b-4b2f-b76c-0a7784f2fd4c
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 8619c6ec-8ffb-4f50-8e2b-2f4ca20b3226
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-13T17:06:17Z"
    lastUpdateTime: "2026-07-13T17:06:17Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-zdbk9"
    reason: AutoApproved
    status: "True"
    type: Approved