---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-24T12:18:15Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-24T12:18:15Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-24T12:18:15Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-24T12:18:15Z"
  name: system:openshift:openshift-monitoring-8sfgg
  resourceVersion: "8449"
  uid: c2d8374c-2063-47e1-9992-3419df4f6a96
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=2140595a-7a89-4e05-b8ed-896a3b09d718
    authentication.kubernetes.io/node-name:
    - ip-10-0-139-109.ec2.internal
    authentication.kubernetes.io/node-uid:
    - cc6e009a-7690-477a-81bb-372360f7dfe7
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-548b489cb8-prgmm
    authentication.kubernetes.io/pod-uid:
    - 4a130a4a-ed5a-4a1e-821a-e5e0c115a0de
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 2939cc89-7eab-4604-8823-35921e9d145a
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-24T12:18:15Z"
    lastUpdateTime: "2026-07-24T12:18:15Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-8sfgg"
    reason: AutoApproved
    status: "True"
    type: Approved