---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-06T20:07:03Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-06T20:07:03Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-06T20:07:03Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-06T20:07:03Z"
  name: system:openshift:openshift-monitoring-b9pq8
  resourceVersion: "8541"
  uid: 5c2b968b-bd08-475a-864c-dee2c4c39d66
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=257c539e-b012-401b-ac87-e4e59f801a13
    authentication.kubernetes.io/node-name:
    - ip-10-0-130-133.ec2.internal
    authentication.kubernetes.io/node-uid:
    - ce336f17-44a9-44a7-a1fe-c189740ed966
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-64786d9cbb-mvwbg
    authentication.kubernetes.io/pod-uid:
    - 7f52f514-81ea-40b8-b6aa-9ab51d3f3462
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 478b220e-efc4-4649-ac46-1d55c9ae3a1d
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-06T20:07:03Z"
    lastUpdateTime: "2026-07-06T20:07:03Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-b9pq8"
    reason: AutoApproved
    status: "True"
    type: Approved