---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-09T12:12:27Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-09T12:12:27Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-09T12:12:27Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-09T12:12:30Z"
  name: system:openshift:openshift-monitoring-rkqnr
  resourceVersion: "8056"
  uid: 1d9f50d7-bc32-4d11-af17-f3e6ebf26b21
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=d6589a0f-d81b-49d1-91fb-197c8544d309
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-117.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 66cf5db5-3838-4753-8e1d-de3fd34f4ba7
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cdcc96965-hcl8g
    authentication.kubernetes.io/pod-uid:
    - eb1847d7-9261-487a-be2c-972566991417
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 08ebfc9f-fe46-4453-9de6-b743998902b7
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRVnd3S2p2RVlhY2NrQVdIRHdvQkdvakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1Ea3hNakEzTXpCYUZ3MHlPREE1TURneE1qQTNNekJhTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJBY1pERGNOWDdYSnV4VHRPRkxTZ2RUeApEeVRiN0NjR3NkdytIbGozMThLSnhuTmtyOUVGZVlFTTJsNnNsYkVEUUVPMExIVzltMW5yK2hBQmNJNnB0YVdqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQXEyZ0llL1Rqa0lYMXFndTFrbGNjTkJEU3lCZStJa0Z5c3F4UQp2ZlhVT2o4R0IrMzZyMGlaM0N4THdFS1hhaDVFUk43TmVSU2VVamJMMnFIbFVIWlluREFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQVRGSTBXZmVYWU9ETEx0UHJOV1V0TVFZK3MvVlA5WDVVdlJBYkMzSVh1bmI0VE9udXB3MCsKaDVGWmY0emVuM1pKU0p0MzBzOEdqS0xzV05COEp0d2Z3WXlvQWJOSUNpWEJnNXZZZm5FcDZWOGUxTFRGQzdMRwpWQWFtcDd0NGhKL0ZIeVJDWDQrTDhYb0JCSkN0Z3J6QWhYUkc1NlZhYXZVd1M2aHRTTE45NDZzQlhZUjd1QUkwCk44YTZSdklXa1grb3Z5Qk1QeXZSRGE1b1drV25ZS1VzNU1RdE91dmQxOUNnK3ZkbmdVYzROOEtqeEdxRHU5aGUKL2syK094aGdLMXFVb2dIa3NDNWk3dXkwM1k4Yzd2YThyMitLakhQVkVMZ3RLMnRGLzE2Y0FVUy9renJMaVpabwp0ZXIvMmM2eTU0NlMwNGJTbkRKdWtDZXpZRUMvOGdrMnZBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-09-09T12:12:27Z"
    lastUpdateTime: "2026-09-09T12:12:27Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-rkqnr"
    reason: AutoApproved
    status: "True"
    type: Approved