---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-04-23T01:12:15Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-04-23T01:12:15Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-04-23T01:12:15Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-04-23T01:12:20Z"
  name: system:openshift:openshift-monitoring-6jsp2
  resourceVersion: "8101"
  uid: e0e378d4-1f5b-488f-88ba-5773c1c06d56
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=27a315fd-8a4f-43bc-9f57-ddf96c8b1b22
    authentication.kubernetes.io/node-name:
    - ip-10-0-138-235.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 98b5b32a-2fb7-4a8a-81c1-bc912f96cda5
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-75587bd455-qgtjh
    authentication.kubernetes.io/pod-uid:
    - 287bea1a-68cd-49c1-a36a-2fc24dbc7719
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: ce8c2b3e-f8dc-4ea8-80d4-408918d1e9fe
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-04-23T01:12:15Z"
    lastUpdateTime: "2026-04-23T01:12:15Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-6jsp2"
    reason: AutoApproved
    status: "True"
    type: Approved