---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-06-15T03:12:35Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-06-15T03:12:35Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-06-15T03:12:35Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-06-15T03:12:35Z"
  name: system:openshift:openshift-monitoring-gzkrc
  resourceVersion: "9278"
  uid: 62d80513-1175-400e-8553-51621ff81283
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=20c93060-b1c1-42ca-a74c-8e7f4621a71e
    authentication.kubernetes.io/node-name:
    - ip-10-0-139-167.ec2.internal
    authentication.kubernetes.io/node-uid:
    - de64b011-e9cb-4317-aa3a-e09044ab423b
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-f9d7df769-9mvkb
    authentication.kubernetes.io/pod-uid:
    - cde73dc3-0cfa-4b1b-afe1-296bdf4e026c
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 23c6d22f-a93c-4fe1-89b4-dcbbd44540d5
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-06-15T03:12:35Z"
    lastUpdateTime: "2026-06-15T03:12:35Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-gzkrc"
    reason: AutoApproved
    status: "True"
    type: Approved